Skip to content
English
  • There are no suggestions because the search field is empty.

Setting up SSO for Entra ID

Follow these steps if Microsoft Entra ID is your identity provider.

Here's how to setup SSO if Microsoft Entra ID is your identity provider.

  1. Sign in to Microsoft Entra ID with a Global Admin account.
  2. Create a new Enterprise Application and name it "Toggl."
  3. On the Overview tab, select Set up single sign-on, then choose SAML.
  4. Use the values from your Toggl SSO profile to fill in the new application's fields. Note: For Identity Provider–initiated login, append ?toggl_product=focus to the Reply URL field.
  5. Under Attributes & Claims, change the Unique User Identifier to user.mail (instead of user.userprincipalname).
  6. Under SAML Certificates, in the Token signing certificate section, set Signing Option to either Sign SAML Response and Assertion or Sign SAML Response — avoid the assertion-only option, as it can cause issues.
  7. Add the individual users or groups who should have access under Users and groups.