Docs » Authentication and Security » About SSO integrations for Splunk Observability Cloud » Configure a Microsoft Entra ID (formerly Azure Active Directory) SSO integration

Configure a Microsoft Entra ID (formerly Azure Active Directory) SSO integration 🔗

The Microsoft Entra ID (formerly Azure Active Directory) integration lets users log in to Observability Cloud using their Microsoft Entra ID account.

Before you begin configuring this integration, ensure you have completed the steps in Configure SSO integrations for Splunk Observability Cloud, including the section Name an SSO integration to learn about naming your integrations.

To configure a Microsoft Entra ID SSO integration, you must be an administrator for your organization. To learn more, see Create and manage users in Splunk Observability Cloud.

Note

The procedure for creating multiple integrations for Microsoft Entra ID is different from the procedure for creating a single integration.

Configure Microsoft Entra ID for a single organization 🔗

For instructions, see Tutorial: Microsoft Entra ID single sign-on (SSO) integration with SignalFx on the Microsoft documentation website.

Configure Microsoft Entra ID for multiple organizations 🔗

  1. In a new browser tab or window, access Tutorial: Microsoft Entra ID single sign-on (SSO) integration with SignalFx on the Microsoft documentation website.

  2. After you complete step 7, do the following:

    1. In the Microsoft Entra ID integration tile, select Integration-specific Entity ID.

    2. Copy the URI that appears next to check box, so you can use it in steps 4a and 4b of the section Step 3: Configure Microsoft Entra ID SSO.

  3. When you reach step 4a and 4b of Step 3: Configure Microsoft Entra ID SSO, use the integration-specific entity ID you copied from Splunk Observability Cloud instead of the URLs listed in the instructions.

  4. Proceed with the rest of the instructions.

After you complete these steps, the Microsoft Entra ID SSO integration is available to users in your Microsoft Entra ID organization. When users sign in to Splunk Observability Cloud from Microsoft Entra ID for the first time, they receive an email containing a link that they must open in order to authenticate. This only occurs the first time the user signs in. Subsequent login attempts don’t require validation.

If you want to turn off the email authentication feature, contact Splunk Observability Cloud support.

Once you have a custom URL configured, your users can continue to log in using their existing username/password pair, or they can use their Microsoft Entra ID credentials instead. Microsoft Entra ID SSO authentication and Observability Cloud username/password authentication are independent.

If you are a Splunk Observability Cloud customer and are not able to see your data in Splunk Observability Cloud, you can get help in the following ways.

Available to Splunk Observability Cloud customers

Available to prospective customers and free trial users

  • Ask a question and get answers through community support at Splunk Answers .

  • Join the Splunk #observability user group Slack channel to communicate with customers, partners, and Splunk employees worldwide. To join, see Chat groups in the Get Started with Splunk Community manual.

To learn about even more support options, see Splunk Customer Success .