Configure Azure Active Directory for ServiceTitan customers

Overview

Enable Microsoft Azure Active Directory (AAD) account for your customer’s ServiceTitan account. This allows them to log in securely using Microsoft credentials across all ServiceTitan products.

Things to know

• To check an employee’s Azure ID:

  • Go to the ServiceTitan Admin Portal.

  • Find the employee's name in the list.

  • Click next to the employee's name.

  • Look at the Azure Active Directory User ID field.

  • If the Azure ID is incorrect, update it with the correct value.

Enable the Azure Active Directory integration

1. Log into your tenant’s account.

2. Go to the top toolbar and click Settings .

3. In the side panel, click Your Account > Feature Configuration.

4. On the Feature Configurations screen that opens, search for the Enable Azure Active Directory Integration configuration.
   

Add the customer’s tenant ID

1. Go to the ServiceTitan Admin Portal.

2. Open the Integration tab.

   Note: Only ServiceTitan Employee Administrator has access to the Integrations tab.

3. Click Add Tenant Id.
   

4. In the window that opens, paste the Directory ID that the customer provided.

5. Click Save.
   

Grant Azure permissions

1. In ServiceTitan, go to the Integration tab and click Grant Permissions. You are redirected to the Microsoft Azure screen.
   

2. Review all permissions all permissions and click Accept.
   

3. After returning to ServiceTitan, go to the Integration tab and make sure the customer's Microsoft Azure Administrator has also accepted the permissions on their end.
   

Create users and groups

There are two options for customers to create users in Azure Active Directory:

• Create groups: In Azure Active Directory (AAD), customers create groups that map to user roles in ServiceTitan.

  Note: ServiceTitan cannot create new users unless these groups are set up.

• Link existing users: To associate existing ServiceTitan users with their AAD identities, customers enter each user's Azure AD Object ID in ServiceTitan.

Option 1

Have the customer complete these steps to create a group.

1. In Azure Active Directory, click Groups.

2. Click New Group.
   

3. In the window that opens, fill out the fields.

4. Click Create.
   

Option 2
Have the customer complete these steps to give you the ID.

1. In Azure Active Directory, click All Users.

2. Select the necessary user.
   

3. Copy the Object ID.
   

4. In ServiceTitan, select the Users tab and click Edit.
   

5. Ask the customer to provide you with the Object ID.

6. In the window that opens paste the Object ID in the Azure Active Directory User Id field.

7. Click Save.
   

Log in with Azure Active Directory

When your customer sets up their AAD, they can log in to ServiceTitan with AAD. Have them complete the below steps:

1. Go to https://go.servicetitan.com/AAD.
   

2. Click Login via Active Directory and you are redirected to the Microsoft Azure Login screen.

3. Enter your credentials and you are redirected to ServiceTitan.

   Note: Use your Active Azure Directory credentials. If you don’t have a ServiceTitan user connected to Active Directory, then you are redirected to the New User screen.
   

4. Fill out the necessary fields and click Create User. You are redirected to ServiceTitan.

Multi-tenant AAD access

Multi-tenant AAD access allows customers to use several tenants in ServiceTitan by using one Azure Active Directory.

Note: For security reasons, automatic user creation is disabled in ServiceTitan for multi-tenant AAD cases.

Add a claim to your AAD tokens

AAD administrators need to add an additional claim to access token and ID token of the user’s Azure Active Directory. It is the user Identifier for ServiceTitan.

The claim should have a one to one relationship with ServiceTitan and should have the following parameters:

• Name: st_tenant_id

• Syntax: Unicode string

• Value: From 1 to 9223372036854775807

• Maximum length: 19 digits

Link AAD users to ServiceTitan

Customers must create ServiceTitan users before linking them to the respective AAD users.

There are two options for doing it:

Option 1: Have your customer use ServiceTitan

Go to Settings > Employees > Add. For more on how to add an employee, see Add and manage office employee profiles.

Option 2: Have your customer use public API

1. Check the ServiceTitan public APIs.

2. When you create a new employee, add their AAD user object ID to ServiceTitan.

   1. Go to portal.azure.com.

   2. Sign in with your Azure username and password.

   3. Select Azure Active Directory.

   4. Click Users.

   5. Select the user.

   6. Click Properties.

   7. Ask the customer to provide you with the Object ID.

   8. In ServiceTitan Admin Portal, select the newly created employee.

   9. Click Edit.

   10. In the window that opens, paste the Object ID to the Azure Active Directory User ID field.
       

Verify multi-tenant login

Have your customer follow the steps below to log in to ServiceTitan by AAD.

1. Go to https://go.servicetitan.com/auth/login/aad.

2. Click Login via Active Directory.
   

3. Sign in with your AAD credentials.
   You are redirected to ServiceTitan upon successful authentication.

 Want to learn more?

• See Set up Azure Active Directory for ServiceTitan login