Setup your SSO via Microsoft Entra ID (formerly Azure Active Directory)
Learn how to establish a connection between Entra ID Single-Sign-On and Filestage
This feature is only available for users on Enterprise plans. Should you have any additional questions, please reach out to our customer support via support@filestage.io or via our chat.
Register the Filestage Platform with Entra ID (former Azure AD).
Registering the Filestage platform as an application establishes a trust relationship between Filestage and the Microsoft identity platform.
And this is how you set up this relationship:
Sign in to the Entra ID Portal.
If you have access to multiple tenants, in the top menu, use the Directory + subscription filter to select the tenant in which you want to register an application.
Select Entra ID (Azure Active Directory).
Under Manage, select App registrations > New registration.
Enter the Display Name (Filestage) for the application.
Specify the users for this application.
Don’t enter anything in the redirect URI. We will configure it in the next section.
Select Register to complete the app registration.
When registration is over, the Entra portal displays the application Overview panel/section. Please copy the Client ID* ( required by filestage ) from this panel.
Configure the redirect URI
The redirect URIis the location where your Entra ID (Azure AD) redirects a user and sends security tokens after authenticating. The Filestage servers use this security token to uniquely identify and safely log your users into the Filestage platform. Set up the redirect URI as follows:
In the Entra ID Portal, in App registrations, select your application.
Under Manage, select Authentication.
Under Platform configurations, select Add a platform.
Under Configure platforms, select the tile (Web) to configure its settings.
Sometimes the client secret is also called the “application password”. The client secret is a string value the Filestage platform uses to identify itself at your Entra ID (Azure AD).
Let’s set it up:
In the Entra ID (Azure) portal, in App registrations, select your application.
Select Certificates & secrets > New client secret.
Add a description to the client secret.
Select an expiration for the secret or specify a custom lifetime (a 1 year lifetime is recommended).
Select Add.
Record the secret’s value* (required by Filestage). This secret value will be permanently hidden once you leave this page.
The client secret is a value that needs to be updated once its lifetime has expired, otherwise the SSO will stop working for your team members. We therefore recommend planning ahead and reaching out to our customer support (support@filestage.io) with a new client secret a week before the active secret expires.
Provide us with the technical details
Time for us to do our homework and set everything up on our side. To configure your SSO instance, we need the following details from your Entra ID directory:
Client ID generated in 9th step of Register app in Entra ID.
Client Secret generated in 6th step of Create client secret.
To ensure compliance with security standards, please provide this information securely and via an encrypted channel to your dedicated Customer Success Manager or our support team (support@filestage.io).
And that's it - your users can now access Filestage through your SSO!
