For the complete documentation index, see llms.txt

Set up Signicat Dashboard login with Microsoft Entra ID

You can set up single sign-on (SSO) for the Signicat Dashboard using Microsoft Entra ID as your external identity provider. This setup allows you to manage user authentication centrally in Microsoft Entra ID while giving your team secure access to Signicat services.

Production accounts only

The external identity provider feature is only available for production accounts in the Signicat Dashboard.

When you configure Microsoft Entra ID as an external identity provider, your team can use their existing work accounts to log in securely to the Signicat Dashboard, without having to set up new user profiles.

Prerequisites

Before you begin the integration process, ensure you have the necessary permissions in Microsoft Entra ID. You need a Microsoft Entra ID user account with one of the following administrator roles:

• Global Administrator
• Application Administrator
• Cloud Application Administrator

Confirm that you have one of these required roles inside your Microsoft Entra tenant before you proceed with the integration.

1. Register an application in Microsoft Entra ID

First, you need to register a new OpenID Connect (OIDC) application in your Microsoft Entra admin centre and create a client secret.

Register the application

1. Log in to the Microsoft Entra admin centre.
2. Navigate to Entra ID > App registrations and select New registration.
3. Enter a clear name for your application (for example, Signicat Dashboard SSO).
4. Choose your preferred supported account types (typically, Single tenant only <your_tenant> for most applications).
5. Under the Redirect URI section, set the platform dropdown to Web and enter the Signicat callback URL: https://login.signicat.com/idps/oidc-vendor/response
6. Click Register to create the application.
7. From the application's Overview page, copy the Application (client) ID and Directory (tenant) ID. Save these securely, as you will need them in a later step.

For an overview of the steps, see the official documentation to Register an application in Microsoft Entra ID.

Add a client secret

1. In your new app registration in the Microsoft Entra admin centre, select Certificates & secrets > Client secrets > New client secret.
2. Add a description and select an expiration period for the secret.
3. Select Add.
4. Immediately record the client secret Value. This secret is never displayed again after you leave this page.

For an overview of the steps, see the official documentation to Add and manage application credentials in Microsoft Entra ID.

2. Prepare for role mapping

Role mapping ensures that your team members automatically receive the correct permissions when they first log in to the Signicat Dashboard. Before contacting Signicat Support, you must decide which of your Microsoft Entra ID groups should map to which Signicat roles.

For each group you want to map, you need to provide its Object ID:

• Find a group's Object ID: Navigate to Entra ID > Groups, select the desired group, and copy the Object ID value from its Overview page.
  Important

  To prevent broken mappings, make sure to provide the Object IDs of your Microsoft Entra groups. If you provide the group name, the display name or the role values, your SSO authentication will fail.

• Available Signicat roles: To learn about the roles and permissions supported in the Signicat Dashboard, visit the Managing roles and permissions documentation.
• List your mappings: You must provide a list of these mappings to our support team. We recommend you start with a simple mapping of one Microsoft Entra group to the OrganisationAdmin role.

3. Configure SSO in the Signicat Dashboard

To complete the setup, you need to contact your onboarding manager or the Signicat support team by creating a support ticket in the Signicat Dashboard. Ensure that you are logged in to the production organisation where you want to enable SSO before creating the ticket.

When you submit your ticket, please provide all of the following fields:

Secure credential sharing

Never send your client secret in plain text through support tickets or unencrypted email. Share the secret value using Signicat Secure Share, request a secure sharing link from your Signicat onboarding manager, or use your organisation's preferred secure sharing solution.

Once our support team receives your ticket, they will configure the integration on our end and notify you when it is ready for testing.

4. Log in with Microsoft Entra ID SSO

Once Signicat confirms the setup is complete, you can test the authentication flow to verify that Microsoft Entra ID successfully handles single sign-on. To do this:

1. Open a new private or incognito browser window.
2. Navigate to the Signicat IDP Selector page at https://dashboard.signicat.com/login-idp-selector.
3. Select Log in with Microsoft Entra ID.

   External Identity Providers log in screen.

4. Enter your work email address associated with your configured domain, then click Log in.
5. You will be redirected to the Microsoft login portal. Enter your credentials and complete any required multi-factor authentication (MFA).
6. Confirm that Microsoft successfully authenticates you and redirects you back to the Signicat Dashboard.

User management with the SCIM REST API

You can edit the roles, permissions and profiles of your existing users after they have already onboarded to the Signicat Dashboard. To modify the configuration of existing users, you need to use the Signicat IAM SCIM API.

This REST API allows you to manage user identity and access programmatically across your platforms by performing the following operations:

• Get user profiles and attributes.
• Update users and their attributes (such as modifying roles for existing, onboarded users).
• Deactivate users.
• Lock and unlock user access.

To learn more about managing your existing users programmatically, see the Signicat IAM SCIM API reference documentation.