Azure Active Directory (Entra ID) Single Sign-On Setup

Introduction

incentX supports Single Sign-On (SSO) via Microsoft Entra ID (formerly Azure Active Directory), allowing your users to log in to incentX using their existing Microsoft credentials. This eliminates a separate incentX password and gives administrators centralized control over who has access — from a single location in Entra.

Example: Your organization already uses Microsoft 365 and manages all user access through Entra ID. Once SSO is configured, your team can click "Continue with SSO" on the incentX login page and authenticate silently through their existing Microsoft session — no additional credentials required.

Prerequisites

• Administrative access to Microsoft Entra ID (formerly Azure Active Directory) at https://entra.microsoft.com.
• Administrative access to incentX (Application Settings > System Configuration).

Step 1: Collect Your Tenant ID from Entra

You will need your Entra Tenant ID to configure SSO in incentX in Step 2.

1. Log in to Microsoft Entra ID at https://entra.microsoft.com.
2. Click Overview in the left sidebar.
3. Copy the Tenant ID displayed on the Overview page. Keep this value — you will paste it into incentX in the next step.

Step 2: Configure Azure AD SSO in incentX

1. Log in to incentX at https://app.incentx.com.
2. Navigate to Application Settings > System Configuration.
3. Scroll to the bottom of the page to find the Azure Active Directory Single Sign-On section, then:
   • Toggle Enable Feature to the On position.
   • Paste the Tenant ID you copied in Step 1 into the Tenant ID field.
   • Click Save.
4. Log out of incentX.

Note: After saving, the SSO option will be active on the incentX login page. Complete Steps 3 and 4 to add the incentX application in Entra and assign users before testing the login.

Step 3: Add the incentX SSO App in Entra

In this step you will find and install the incentX SSO application from the Entra enterprise app gallery, and perform the first-time admin consent.

1. In Entra ID, navigate to Enterprise Applications in the left sidebar.
2. Click New Application.
3. Search for incentX and click on incentX SSO — this opens a slide-in panel.
4. Click Sign up for incentX SSO. This opens the incentX login window.
5. On the incentX login page, click Continue with SSO, then enter your email address and click Continue with SSO again.
6. On the Microsoft consent screen, check Consent on behalf of your organization and click Accept. You are now signed in to incentX via Azure AD SSO.

Step 4: Assign Users or Groups

By default, all users in your Entra directory may attempt SSO. To restrict access to specific users or groups:

1. In Entra ID, go to Enterprise Applications and find the incentX SSO app.
2. Click the incentX SSO listing to open its settings panel.
3. Click Properties and enable Assignment required, then click Save. This restricts SSO to only users or groups you explicitly assign.
4. Click Users and Groups in the left panel.
5. Click None Selected, then add the users or groups you want to grant SSO access to.
6. Click Select, then click Assign.

Note: Users must also exist as active users in incentX. Adding them in Entra grants SSO authentication, but their incentX account and role must be configured separately. See Users Functional User Manual for user setup.

Step 5: Test the Login

1. Open https://app.incentx.com in a browser.
2. Click Continue with SSO.
3. Enter your Microsoft email address and click Continue with SSO.
4. Microsoft will authenticate your session and redirect you back to incentX, where you will be signed in automatically.

Troubleshooting

• "Continue with SSO" button not visible: Confirm the Azure AD SSO feature is toggled On and the Tenant ID was saved correctly in System Configuration.
• User receives an access error after authenticating in Microsoft: Verify the user is assigned to the incentX SSO app in Entra (Step 4) and that their incentX user account is active.
• Consent screen does not appear: Ensure you are completing Step 3 with a Microsoft account that has Global Administrator or Cloud Application Administrator privileges in Entra.
• Need further assistance? Contact incentX Customer Support.