Overview

Microsoft Azure Active Directory is now Microsoft Entra ID

While you may still see its former name in some screenshots or steps, it does not affect the instructions in this guide.

If your company uses Microsoft Entra ID, an Administrator can add Procore as an enterprise application in your Microsoft Entra admin center to enable Single Sign-On (SSO) authentication for your organization's Procore users. This ensures your users securely log in from a desktop or mobile device using your company's preferred sign in process.

Supported Login Flows

Procore supports both IdP- and SP-initiated login flows with Microsoft Entra ID. In this setup, Microsoft Entra ID (your organization's identity portal) is the IdP (Identity Provider), and Procore is the SP (Service Provider).

Feature

IdP-Initiated SSO

SP-Initiated SSO

Starting Point

Organization SSO Portal / Dashboard

Procore Login Page

User Action

Clicks Procore tile inside company portal

Enters email at Procore login

Authentication Flow

IdP → Procore

Procore → IdP → Procore

For a complete list of supported identity providers, see Which SSO identity providers are supported by Procore?

Configuration Steps

 Important: Before Starting SSO Configuration

Contact your Procore point of contact or Procore Support if your organization uses:

  • Portfolio Financials & Capital Planning. This solution requires additional configuration to complete authentication setup.

  • Procore Pay. This solution requires Multi-Factor Authentication (MFA) for Payments alongside SSO.

Microsoft Entra, the Microsoft Entra logo, and other Microsoft marks are trademarks or registered trademarks of Microsoft Corporation and/or its affiliates in the United States and/or other countries.