# Connecting SailPoint and Microsoft Entra SSO

To connect SailPoint and Microsoft Entra SSO, perform the following tasks:

## Adding Discovery Connector in SailPoint

Discovery connectors have categories that encompass a group of discovery sources to find enterprise applications. You can automatically discover enterprise applications using discovery sources, which search for applications your organization has on-boarded or can on-board. For more information, refer to [Discovering Enterprise Applications](<https://documentation.sailpoint.com/saas/help/ai/app_onboarding/app_discovery.html#discovering-applications-automatically>).

1. Go to **Admin \> Connections \> Discovery Connectors**.
2. Select **Create Connector**.
3. Select **Connector Category**.
4. Select **Continue**.
5. Search for a source type and select **Configure**.
6. Review the directions and select **Start Connector Setup**.
7. Review the pre-populated source name, source owner, and description. To update, select **Edit**.

   > **Note**
   >
   > Source name must be unique.
8. (Optional) If enabled for your organization, select the **Use a Credential Provider** checkbox to manage the source's authentication using a credential provider.

   > **Note**
   >
   > To add a Credential Provider in SailPoint, go to **Admin \> Connections \> Credential Providers**. For more information about credential providers, refer to [Credential Providers](<https://documentation.sailpoint.com/connectors/help/credential_providers.html>).
9. Configure the authentication to allow SailPoint to connect to the source. For more information, refer to the **Connection Settings** page.
10. Select **Finish**. A test connection is performed in the background.
11. If the test connection is successful, your source is created, and you are prompted to run a discovery.

    - If you want to discover applications now, select **Discover**.

      - **Additional Settings \> Discovery Settings** - The latest application discovery history is shown.
      - **Additional Settings \> Discovery Activity** - Discovered applications are listed.
    - If you want to discover applications later, select **Cancel**. As no discovery has taken place, in the source details:

      - **Additional Settings \> Discovery Settings** - The latest application discovery history is blank.
      - **Additional Settings \> Discovery Activity** - No discovered applications are listed.

      You are navigated to the **Sources** page, where the source created is listed.

## Base Configuration

Provide the base configuration parameters. Information you entered in the Connector Setup dialog is automatically entered into the fields in the Base Configuration page. You can edit this information, if necessary.

> [!NOTE]
>
> Ensure that the name and description of each connector is unique.

1. Enter a descriptive **Connector Name** for the connection.
2. Enter the **Description** that provides details necessary to distinguish it from similar connection sources.
3. In **Connector Owner**, enter the name of the owner responsible for administrating, operating and managing the source system.
4. Select **Save**.

## Connection Settings

Provide the information required to connect to the Microsoft Entra SSO instance with OAuth 2.0 authentication:

> [!NOTE]
>
> **Screenshot**
>
> [![Connection Settings](<https://documentation.sailpoint.com/connectors/discovery/sso/ms_entra_sso/help/img/connections.png>)](<https://documentation.sailpoint.com/connectors/discovery/sso/ms_entra_sso/help/img/connections.png>)

1. Select the **Grant Type** as Client Credentials.
2. In the **Client ID** field, enter the Microsoft Entra SSO API Client ID for OAuth2 authentication.
3. In the **Client Secret** field, enter the Microsoft Entra SSO API Client Secret.
4. In the **Domain Name** field, enter the name of the Microsoft Entra SSO domain to be managed. For example, `contoso.onmicrosoft.com`.

   > **Important**
   >
   > Ensure the domain name ends with `.onmicrosoft.com` or `.onmicrosoft.us`. Custom domain names are not supported.
5. Select **Save**.

## Review and Test

Perform a test to confirm the connection to SailPoint.

1. Go to **Review and Test**.
2. Confirm that the entries in each field are correct.

   If you note any mistakes, return to the section and make corrections.
3. Select **Test Connection**.

## SailPoint Application Onboarding

SailPoint application onboarding enables you to easily onboard new applications and create sources following the successful onboarding of a discovery source. To use this feature, continue to **Discovered Applications** in the SailPoint user interface.

For more information, refer to [Application Onboarding](<https://documentation.sailpoint.com/saas/help/ai/app_onboarding/index.html>) in the SailPoint SaaS documentation.