Setup Guide: Microsoft Entra ID

Microsoft Azure Active Directory is now Microsoft Entra ID

While you may still see its former name in some screenshots or steps, it does not affect the instructions in this guide.

Overview

To setup and configure SP-initiated SSO with Microsoft Entra ID.

To prepare for the integration, complete these steps:

Send a request to your company's Procore point of contact to discuss your company's specific SSO requirements and goals.
- Ensure that you or a user in your IT organization has an active account with Global Administrator rights to Microsoft Entra ID.
- In Microsoft Entra ID, select and assign users to create an SSO group that contains the users who will be using your SP-initiated SSO solution. For instructions, see the Microsoft Entra ID documentation.

To complete the integration, complete these steps:

Complete the required configuration steps. See Configure SP-Initiated SSO for Microsoft Entra ID.
Notify your company's Procore point of contact that the configuration is complete. Your Procore point of contact or Procore Support must add the email domain(s) that will be targeted for login via SSO to the Company Admin tool in Procore before you can enable SSO.
Log in to Procore. See Log into Procore Using SP-Initiated Microsoft Entra ID.

Once integration is complete, keep the following in mind:

SSO-Targeted Users: Users with designated email domains must log in to Procore using their Microsoft Entra ID credentials.
Non-SSO Users: Any users outside the targeted domains will continue signing in with their standard Procore credentials.
Password Management: All passwords and security policies are managed directly in Microsoft Entra ID.
Platform Support: SSO is supported across Procore Web, iOS, and Android.