1. Log in to the Microsoft Entra Admin Center and select the “App Registrations” tab on the left-hand window. Then select “New Registration”.
2. Fill out the following boxes as shown. For the “Redirect URI” type in the TadHealth website specific to your school that we provided in the email. For example, https://[Your School Code Here].tadhealth.app/api/v2/auth/microsoft/callback/.
“Save” these configurations.
3. Once finished with the Registration, you will see the following page. Select “Certificates & secrets” and then “+ New client secret” to add a new secret. Match the description and Expires limit shown and “Add” the secret.
4. After completing the last step, you should see the secret show up in the TadHealth SSO app under “Certificates & secrets”. Save the value under the “Value” portion here. We will need it later on in this setup.
5. Navigate to “Branding & properties” and enter in the following fields as shown below. Like in step 3, replace “your-school-name” with the short-name in your TadHealth url. Save your changes.
6. Navigate to “Authentication (Preview)” and make sure the following options are selected under the “Settings” tab. Save the changes.
7. Next, navigate to the “API Permissions” tab and select the “Grant admin consent”. It may have your domain listed here.
8. Navigate to the “Overview” tab, and you will be able to see that everything is set up correctly. We’ll need to keep this page open as we’ll need the Application (client) ID and Directory (tenant) ID for later steps.
9. Next, you’ll need to open a new tab and login to the Admin site provided in the email. You’ll need to use the email and password provided to you in the email as well.
10. You’ll want to click on the “Sign-in Options” and select “Microsoft SSO”. This will allow you to take the values from the previous steps and enter them in here.
Client ID here needs to be the Application (client) ID from step 8.
Secret needs to be the Value we saved from step 4.
Tenant ID needs to be the Directory (tenant) ID from step 8.
Now, you can navigate to the bottom of the page and select “Save”.
11. To test the SSO connection, you’ll also need to update the admin email address and password. You’ll find this under the “Admin Account” section at the bottom of the page. You will want to enter in your email address as well as a new password. The “Current Password” is the same password we provided in the email to log in.
After saving your new email and password, go to the top right of the page and logout. You will still be on the Admin login page, so you’ll want to go to your school’s TadHealth login page: https://[Your School Code Here].tadhealth.app
You should see an option to “Login with Microsoft SSO. Click on it and go through the login process. You should end up on the TadHealth Platform.
If for any reason this doesn’t work as expected, please email [email protected] for more support.