Manage Single Sign-On (SSO) in Enterprise Hub

Overview

Single Sign-On (SSO) allows users to access Enterprise Hub using their Microsoft Entra credentials instead of a separate username and password. This simplifies login and centralizes authentication through your identity provider.

Before you begin

• You must have Administrator permissions in Enterprise Hub.

• You must have access to your organization's Microsoft Entra tenant ID. For more, see Set up Microsoft Entra ID Single Sign-On (SSO) and link user accounts.

• SSO must be configured separately for each environment, for example: Go, and Next.

• If a connection is not set up in an environment, users cannot access that environment using SSO.

• Only Microsoft Entra is currently supported.

• Multiple Entra connections can be added, for example, for different business units.

Create an SSO connection in Enterprise Hub Settings

1. In Enterprise Hub, go to Settings > Single Sign-On (SSO).

2. Click Add Connection. 

3. In the window that opens:        

   1. Enter an Integration Name, for example: Hometown SSO.

   2. Enter your Microsoft Entra Tenant ID. You can retrieve this from your Microsoft Entra admin portal.

4. Click Proceed with Entra Setup. Enterprise Hub automatically copies a setup URL to your clipboard.

5. Select Enable Auto Linking for organizations with many users, auto-linking reduces manual setup. When enabled:  

   1. Users select Continue with Entra on login.

   2. They authenticate with Microsoft.

   3. Enterprise Hub prompts them to confirm linking.

   4. After confirmation, their accounts are automatically linked.

   5. If a user declines linking, they must log in using their Enterprise Hub username and password. 

6. Open a new browser tab.

7. Paste the URL into the address bar. You are redirected to Microsoft Entra to complete the consent process.

8. Review the permission request.

9. Click Confirm.

When the permission is granted, the connection status updates to Active.

Understand connection statuses in Microsoft Entra

Each connection displays a status tag:

• Pending: Microsoft consent has not been completed.

• Active: Connection is live and ready for user linking.

• Inactive: Connection has been deactivated.

• Deleted connections no longer appear in the list. 

If the URL was not copied automatically, you can:

• Locate the connection in the list.

• Click the clipboard icon to copy the setup URL manually.

Edit, deactivate, or delete a connection

From Settings > Single Sign-On (SSO), click More next to a connection. You can:

Edit

• Update the integration name.

• Enable or disable auto-linking.

Deactivate

• Temporarily disables SSO for this connection.

• Keeps configuration and user links.

• Does not require repeating Microsoft consent if reactivated.

Note: Use Deactivate when troubleshooting or preparing to migrate connections.

Delete

• Deletes all configuration and user link data.

• Requires full reconfiguration and consent if recreated.

Manage user SSO linking

To manage users:

1. Go to User Management.

2. In the side panel, click Security > SSO.

This screen lists all active users and their SSO status.

User status indicators

• Green (Enabled): User is linked and SSO is active.

• Red (Disabled): User is linked but SSO login is disabled.

• Gray (Not Linked): User has not been linked to Microsoft Entra.

You can:

• Search by name, username, email, or domain.

• Filter by Enabled, Disabled, or Not Linked. 

View connection details

1. Click More   next to a user.

2. Select Connection Details.

You can view:

• Enterprise Hub user information

• Microsoft Entra Tenant ID

• Microsoft Entra Object ID (unique user identifier) 

Disable or unlink a user

From Connection Details, you can:

Disable

• Turns off SSO for that user.

• User logs in with Enterprise Hub credentials.

• Keeps the link intact.

Unlink

• Removes the Microsoft Entra association.

• Logs in with their credentials

• Deletes the stored Entra user data.

• Requires relinking to re-enable SSO.

Link a user

If a user is not linked:

1. Click More next to the user.

2. Select Link.

3. Select the appropriate Microsoft Entra organization. 

4. Sign in with your Entra account and grant permission to list the accounts. 

5. Select the matching Entra user from the list. 

6. Or, manually enter the user's Entra Object ID.

7. Confirm to complete linking.

When linked, the user status changes to Enabled.

Want to learn more?

• See Set up Microsoft Entra ID Single Sign-On (SSO) and link user accounts