If your company wishes to use SSO, you can configure Penneo and your Entra ID to allow employees to log in directly to Penneo without having to be invited first.
This guide will explain how to set this up. Note that only administrators can set up SSO with Microsoft Entra app in your Penneo company account.
- Connect your Entra Tenant ID to your Penneo account
- Install the Penneo application in Entra ID
- Give access to users and groups
Connect your Entra ID to your Penneo account
To connect your Entra ID to your Penneo account, you need to add your Microsoft Entra Tenant ID in the company settings.
Every Entra ID in Azure is identified by a unique string referred to as a Tenant ID.
The Tenant ID is a hex number with the format xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx.
You can find Tenant ID and Primary domain in the Azure portal. Select Microsoft Entra ID, then you will find the information needed in the Overview page as well as Properties.
Once you have found your Tenant ID and Primary domain, follow the steps below:
- When logged in to Penneo, click on Configure on the left side menu, and then Company.
- Scroll down to Miscellaneous and input your Tenant ID in the field.
- Click on Save changes.
Install the Penneo application in Microsoft Entra.
To install the Penneo app in your Microsoft Entra app, your Microsoft Entra administrator needs to log in to Penneo and manage consent on behalf of your organization by checking the box next to "Consent on behalf of your organization" and then click Accept.
Your Penneo app should now show up in your Microsoft Entra app.
Give access to users and groups
Now that you have added the Penneo application to your Microsoft Entra app, you can give your users access to it.
Read more on this article from Microsoft describing how to give access to users, and see more information here.
Existing users
The instructions above (to give Penneo users access to the Microsoft Entra app) are only valid for new users of your Penneo company account.
If there are already users on your Penneo company account, they cannot automatically use the SSO via Microsoft Entra app. To use it, they need to activate Microsoft as a login method.
Check out these guides to learn:
- How to activate Microsoft as a login method for a user: How to enable/disable users' login methods (for Administrators)
- How to add Microsoft credentials to your login methods: How to edit my login credentials.