---
title: "Using Azure Active Directory (WS-Fed) to Authenticate to Certero | v8"
canonical: "https://ai-docs.certero.com/space/CUP/118950240/Using%20Azure%20Active%20Directory%20(WS-Fed)%20to%20Authenticate%20to%20Certero%20%7C%20v8"
format: markdown
---
From Certero version 8, there is the ability to use Federated Authentication via Azure Active Directory. In the current release customers must have a traditional on-premises Active Directory and Azure Active Directory. The following sections provide the instructions on how to use Azure Active Directory to authenticate to Certero. 

## Step 1 - Active Directory Connector 

1. Go to Connectors > Active Directory
2. Open the properties of the Active Directory Connector
3. Click on the Authentication tab
4. <span style="color: #000000">Copy the URI displayed under Federated Authentication </span>

<span style="color: #000000">N.B. do not change the Logon Method from Forms Authentication to Federated Authentication at this point </span>

## <span style="color: #000000">Step 2 - Azure Active Directory Configuration </span>

1. <span style="color: #000000">Login to Azure Active Directory Admin Center ( </span>[https://aad.portal.azure.com/ ](https://aad.portal.azure.com/)<span style="color: #000000">) using an Administrator account </span>
2. <span style="color: #000000">Select Azure Active Directory in the left hand menu </span>
3. <span style="color: #000000">Select App registrations in the Overview menu </span>
4. <span style="color: #000000">Click New registration at the top of the screen </span>
5. <span style="color: #000000">Give the registration a friendly name e.g. Certero </span>
6. <span style="color: #000000">In the Support account types section select "Accounts in this organizational directory only (Organisation only - Single tenant)" </span>
  1. <span style="color: #000000">In the Redirect URI section select "Web" and paste in the URI from the Active Directory connector in </span>
7. <span style="color: #000000">Click Register to complete the App registration </span>
8. <span style="color: #000000">Click on the Owned applications tab in App registrations and click on the name of the registration that has just been created </span>
9. <span style="color: #000000">Click Add an Application ID URI on the right hand side of the screen </span>
10. <span style="color: #000000">Click set and click save </span>
11. Click the copy to clipboard button and save this away:
12. Click endpoints at the top of the screen
13. Copy the Federation metadata document URL and save this away:

<span style="color: #000000">Step 3 - Complete the Configuration </span>

1. Go to Connectors > Active Directory
2. Open the properties of the Active Directory Connector
3. Click on the Authentication tab
4. Change the authentication from Forms Authentication to Federated Authentication
5. In the Application ID Uri field, paste in the Application ID Uri you saved point 12 above.
  1. In the Metadata Document field, paste in the Federation metadata document address you saved in point 14 above
6. <span style="color: #000000">Click Save to save the configuration </span>
7. <span style="color: #000000">To revert back to previous method of authentication change the authentication from  Federated Authentication to Forms Authentication </span>

## <span style="color: #000000">Step 4 - Test Azure Active Directory Authentication </span>

1. <span style="color: #000000">Ensure there is an Active Directory login already created for the test user under Administration > Logins </span>
2. Ensure that you are logged in as this user into Azure Active Directory
3. <span style="color: #000000">Go to the Certero login screen </span>
4. <span style="color: #000000">Tick the box Windows/Integrated Authentication and click Login </span>
5. This should login using the Azure Active Directory Credentials or ask you to provide the Azure Active Directory credentials.