---
title: "Using Azure Active Directory to Authenticate to Certero | v7"
canonical: "https://ai-docs.certero.com/space/CUP/118851766/Using%20Azure%20Active%20Directory%20to%20Authenticate%20to%20Certero%20%7C%20v7"
format: markdown
---
From Certero version 7, there is the ability to use Federated Authentication via Azure Active Directory. In the current release customers must have a traditional on-premise Active Directory and Azure Active Directory. The following sections provide the instructions on how to use Azure Active Directory to authenticate to Certero. 

## Step 1 - Active Directory Connector 

1. Go to Connectors > Active Directory
2. Open the properties of the Active Directory Connector
3. Click on the Authentication tab
4. <span style="color: #000000">Copy the URI displayed under Federated Authentication </span>

<span style="color: #000000">N.B. do not change the Logon Method from Forms Authentication to Federated Authentication at this point </span>

## <span style="color: #000000">Step 2 - Azure Active Directory Configuration </span>

1. <span style="color: #000000">Login to Azure Active Directory Admin Center ( </span>[https://aad.portal.azure.com/ ](https://aad.portal.azure.com/)<span style="color: #000000">) using an Administrator account </span>
2. <span style="color: #000000">Select Azure Active Directory in the left hand menu </span>
3. <span style="color: #000000">Select App registrations in the Overview menu </span>
4. <span style="color: #000000">Click New registration at the top of the screen </span>
5. <span style="color: #000000">Give the registration a friendly name e.g. Certero </span>
6. <span style="color: #000000">In the Support account types section select "Accounts in this organizational directory only (Organisation only - Single tenant)" </span>
7. <span style="color: #000000">In the Redirect URI section select "Web" and paste in the URI from the Active Directory connector in Step 1 </span>
8. <span style="color: #000000">Click Register to complete the App registration </span>
9. <span style="color: #000000">Click on the Owned applications tab in App registrations and click on the name of the registration that has just been created </span>
10. <span style="color: #000000">Click Add an Application ID URI on the right hand side of the screen </span>
11. <span style="color: #000000">Click Set and paste in the URI from the Active Directory connector in Step 1 </span>
12. <span style="color: #000000">Click Endpoints at the top of the screen </span>
13. <span style="color: #000000">Copy the WS-Federation sign-on endpoint URI </span>

## <span style="color: #000000">Step 3 - Complete the Configuration </span>

1. Go to Connectors > Active Directory
2. Open the properties of the Active Directory Connector
3. Click on the Authentication tab
4. Change the authentication from Forms Authentication to Federated Authentication
5. <span style="color: #000000">In the Sign-on Endpoint box paste in the WS-Federation sign-on endpoint URI from Step 2 </span>
6. <span style="color: #000000">Click Save to save the configuration </span>
7. <span style="color: #000000">To revert back to previous method of authentication change the authentication from  Federated Authentication to Forms Authentication </span>

## <span style="color: #000000">Step 4 - Test Azure Active Directory Authentication </span>

1. <span style="color: #000000">Ensure there is an Active Directory login already created for the test user under Administration > Logins </span>
2. Ensure that you are logged in as this user into Azure Active Directory
3. <span style="color: #000000">Go to the Certero login screen </span>
4. <span style="color: #000000">Tick the box Windows/Integrated Authentication and click Login </span>
5. This should login using the Azure Active Directory Credentials or ask you to provide the Azure Active Directory credentials.