No results found. Ask us directly:

How to set up SSO using Azure AD ID (OAuth)?

Last updated: October 5th 2026 · Status: Validated · Article ID: 3878628

💻 Environment/Context

  • Login
  • Integrations

 

In order to configure SSO for your workspace, Admin access to both your Azure AD tenant and ScorePlay is required.

This guide applies to workspaces enabling Single Sign-On (SSO) via Azure Active Directory (Microsoft Entra ID) using the OAuth 2.0 framework. 

This also requires access to the Azure Portal with sufficient permissions to register applications and grant admin consent. ScorePlay must be provided with three values to complete the setup: Secret Value, Application (Client) ID, and Tenant (Directory) ID

 

 

❓ Issue/Question

  • How do I enable Single Sign-On for our ScorePlay workspace using Azure Active Directory (Microsoft Entra ID)? I want our users to be able to log in with their existing organisational credentials
  • How to set up SSO using Azure AD ID (OAuth)?

 

👌 Resolution/Answer

Step 1: Register an application in Azure AD

  • Log in to the Azure Portal with your Azure account
  • Navigate to Azure Active Directory (also listed as Microsoft Entra ID)
  • Click App registrations → New registration
  • Fill in the details:
    • Name: e.g. scoreplay
    • Supported account types: select the option appropriate for your organisation
    • Redirect URI: set type to Web and enter:
      https://media.scoreplay.io/oauth/[orgsubdomain]/callback/azure
      (replace [orgsubdomain] with your ScorePlay subdomain)
  • Click Register

 

Step 2: Configure authentication

 

Step 3: Set API permissions

  • Go to API permissions → Add a permission
  • Select Microsoft Graph
  • Add the following permission:
    • User.Read
  • Click Grant admin consent if required by your organisation

 

Step 4: Create a client secret

  • Go to Certificates & Secrets
  • Click New client secret
  • Add a description, set an expiry period, and click Add
  • Copy the Secret Value immediately — it will not be shown again after you leave the page

 

Step 5: Collect the required values

From the app registration Overview page, note down:

  • Application (Client) ID
  • Directory (Tenant) ID
  • Secret Value (from Step 4)

 

Step 6: Send credentials to ScorePlay

Share the three values — Secret Value, Application ID, and Tenant ID — with your ScorePlay CSM (via a secure zip file). ScorePlay will complete the SSO configuration on their end.

 

🔖 Notes 

  • The Secret Value is only visible immediately after creation in Azure — copy it before navigating away
  • The Redirect URI must exactly match https://media.scoreplay.io/oauth/[orgsubdomain]/callback/azure — Any mismatch will cause OAuth authentication to fail
  • Client secrets have an expiry date — note the expiry and plan to rotate the secret before it lapses to avoid SSO disruption
  • Contact your ScorePlay CSM if you are unsure of your org subdomain or need guidance on transmitting credentials securely