Prerequisites
Before you start, make sure you have access to your Microsoft Entra ID tenant and the required administrator permissions in both seventhings and Microsoft Entra ID.
Set up Microsoft Entra ID in seventhings
In the seventhings menu, open Integrations and select SSO with Microsoft Entra ID (Azure AD).
You need to enter three values from your Microsoft Entra ID app registration in seventhings:
Client ID
Client Secret
Tenant ID
Set up the application in Microsoft Entra ID
Register seventhings as an application in your Microsoft Entra ID tenant. Open the Microsoft Entra admin center.
Sign in with your work Microsoft account and select the tenant you want to use to sign in to seventhings. Open Microsoft Entra ID.
1. Create an app registration
Select App registrations. If no app registration exists for seventhings yet, create one:
Select New registration.
Enter a descriptive name, such as seventhings SSO.
Select the supported account types. To allow sign-in only with accounts from your own tenant, select Accounts in this organizational directory only (Single tenant).
You will configure the redirect URIs in the next step. Select Register.
Open the newly created app registration. If a suitable app registration for seventhings already exists, open that registration instead.
2. Configure the redirect URIs
In the app registration, open Authentication. If there is no Web platform configuration yet, select Add a platform and choose Web.
Copy both Mobile Redirect URL and Web Redirect URL from the seventhings configuration screen (see the second screenshot above). Add both URLs as redirect URIs under the Web platform in Microsoft Entra ID. Use Add URI to add another entry and save your changes. Copy the URLs exactly as displayed in your own seventhings instance; the URLs in the screenshot are examples only.
3. Copy the client ID and tenant ID
Open the app registration’s Overview. Copy the Application (client) ID into the Client ID field and the Directory (tenant) ID into the Tenant ID field in the seventhings configuration screen.
4. Create and copy the client secret
Create a client secret. This step is required for the SSO setup described here. In the app registration, open Certificates & secrets. Alternatively, select Client credentials on the Overview page.
Under Client secrets, select New client secret. Enter a description, choose an expiration period and select Add. Immediately copy the contents of the Value column and paste it into the Client Secret field in the seventhings configuration screen. Important: Copy the secret’s Value, not its Secret ID.
The client secret value is only displayed immediately after creation. Store it in a password manager if you need to access it again. If you did not copy the value and it is no longer displayed, create a new secret. In seventhings, you cannot view the secret again after saving it because it is stored encrypted in the database.
5. Configure API permissions
Open API permissions. Select Add a permission → Microsoft Graph → Delegated permissions and add the following permissions if they are not already present:
openid – Sign users in.
User.Read – Sign in and read user profile.
With the required administrator permissions, select Grant admin consent for <tenant name>. Check that both permissions are shown as granted. The name in the button depends on your tenant.
Important: Renew the client secret before it expires
Microsoft Entra ID limits the validity of your client secret. Without a valid secret, SSO sign-in to seventhings will fail for your team.
Create a new secret in your Entra ID app registration before the current one expires. Then enter the new value in seventhings under Integrations → SSO with Microsoft Entra ID in the Client Secret field.