Skip to main content
Single sign-on (SSO) lets your organization manage Kroo user authentication through Microsoft Entra ID or Okta.

​
Prerequisites

  • Kroo administrator access to your company’s SSO settings in the Kroo app
  • Identity provider administrator access for Microsoft Entra ID or Okta
  • Permission to create or update an OAuth/OIDC application in your identity provider

​
Setup

Choose your identity provider and enter the required values directly in the Kroo app.
Use these steps to configure Microsoft Entra ID as your SSO provider.
1

Configure API permissions in Microsoft Entra

In your Microsoft Entra app registration, grant the required Microsoft Graph API permissions:
  • User.Read: Allows Kroo to read the signed-in user’s basic profile
  • Directory.Read.All: Allows Kroo to read directory data required for authentication
Your Microsoft Entra administrator may need to grant admin consent after adding these permissions.
2

Add the redirect URI

In the app registration, go to Authentication, add or edit the Web platform, and add this redirect URI:
Microsoft sends users back to this URL after a successful login.
3

Create a client secret

In the app registration, go to Certificates & secrets and create a new client secret.
Copy the client secret value immediately. Microsoft Entra will not show it again after you leave the page.
4

Enter Microsoft Entra details in Kroo

In the Kroo app, open your company’s SSO settings and enter:
  • Verified Domain: The verified email domain users will use to sign in to Kroo, such as yourcompany.com
  • Provider: Select Microsoft Entra ID OIDC
  • Issuer: https://login.microsoftonline.com/<tenant-id>/v2.0, using your Microsoft Entra Tenant ID from the app registration overview page. Use the tenant ID GUID, not the qualified tenant name such as yourcompany.onmicrosoft.com
  • Client ID: Found on the app registration overview page
  • Client Secret: The secret value generated under Certificates & secrets

​
Testing

After saving your SSO settings, test sign-in with a user assigned to the identity provider application. Confirm the user can complete the provider login flow and return to Kroo successfully.
Keep an existing Kroo administrator session open while testing SSO so you can update settings if the first attempt fails.

​
Support

If you run into issues during setup, contact implementations@getkroo.com.