Enable Azure AD SSO for the organization

Enable Azure AD SSO for the organization


You’ll need Admin or Owner level access to your Organization to enable this option.

Configure the app registration in the Azure portal

  1. Log in to the Azure Portal portal.
  2. Navigate to Azure Active Directory - App Registrations.
  3. Select Register an application. Then enter in and select the following information:

  1. Navigate to the newly created App Registration and click Overview.
  2. Make note of the Application (client) ID.

  1. Navigate to Certificate & Secrets.
  2. Under Client secrets, click +New client secret.
  3. Name the client secret appropriately and choose your expiration.


If you choose for the client secret to expire, you MUST update it before the expiration or you will not be able to log in to Perch after it expires.
  1. Make note of the newly created client secret.

  1. Navigate to API Permissions and click Grant Admin consent for Default Directory.

Configure Perch to enable Azure AD SSO

  1. From the main menu, click on Settings.
  2. Select Security.
  3. Under Enterprise SSO Connection, toggle the Enabled slider to On.
  4. In the Provider dropdown, select Microsoft Azure AD.
  5. Using the information collected from the newly created App Registration, fill in the fields as shown in the picture below.
  6. Use your primary domain name in Microsoft Azure AD Domain and add additional domain aliases if needed.

  1. Click Save.