Single Sign-On (SSO) for Microsoft Entra ID

Single Sign-On (SSO) for Microsoft Entra ID

What is Single Sign-On?

Single Sign-On allows users to access Link4 using their existing organisation-managed Microsoft account instead of relying only on a separate Link4 login.

Info
What’s New

  • Microsoft Entra ID SSO: Organisations using Microsoft Entra ID can configure Single Sign-On access to Link4.
  • Corporate Credential Sign-In: Users can access Link4 using their organisation’s Microsoft Entra ID corporate credentials.
  • OIDC-Based Integration: The integration uses OpenID Connect (OIDC).
  • Private Key JWT Authentication: Client authentication is configured using Private Key JWT.
  • Authorization Code Flow: The authentication process uses the OAuth 2.0 Authorization Code Flow with OIDC.
Info
Why this matters for government and enterprise customers 

  • Supports an organisation-managed sign-in approach for Link4, rather than requiring users to rely solely on a separate Link4 credential experience.

  • Aligns Link4 access with Microsoft Entra ID environments already used by many larger organisations to manage workforce identities and application access.

  • Provides a standards-based SSO implementation using OIDC and the Authorization Code Flow, with Private Key JWT used for client authentication.

  • Gives IT administrators a defined configuration path through Microsoft Entra ID app registration.





    • Idea
    Who Is This For?
    This feature is mainly suitable for:
    Government departments and agencies
    Enterprise customers using Microsoft Entra ID
    Organisations with centrally managed corporate identities

    Technical Configuration

    Item
    Configuration
    PlatformLink4
    Identity Provider
    Microsoft Entra ID
    Protocol
    OpenID Connect (OIDC)
    Client Authentication
    Private Key JWT
    Authentication Flow
    Authorization Code Flow

    Info
    High-Level Setup Process


    1. Customer IT Administrator
    Sign in to the Microsoft Azure portal using an account with the required Microsoft Entra ID permissions.

    2. Microsoft Entra ID
    Navigate to:

    Microsoft Entra ID > App registrations

    3. App Registration
    Create a new App Registration for the Link4 SSO configuration.

    4. Configure SSO
    Complete the remaining configuration according to the Link4 SSO Technical Implementation Guide.

    5. User Access
    After configuration is completed, users can sign in to Link4 using their organisation’s Microsoft Entra ID corporate credentials.

    Alert
    Customer Responsibilities

    The configuration must be completed by an administrator who has the required Microsoft Entra ID permissions. The setup starts by creating a Microsoft Entra ID App Registration in the Microsoft Azure portal.