Single Sign On (SSO) lets your team sign in to Detrack using their existing work credentials from your identity provider. This removes the need for separate passwords and gives your admins central control over who can access Detrack.
Note: This feature must be enabled by the Detrack support team. Please contact support via live chat to request access.
Before You Start
You'll need:
Admin access to your organization's Microsoft Entra ID
An existing Microsoft Entra directory with users added
During configuration, you'll be asked to enter your SSO Login URL, Entity ID, and Federation metadata URL.
Step 1: Install The SSO Integration
Navigate to Integrations > Available Integrations and locate Microsoft Entra ID under the SSO Integrations section.
Click Configure in the pop-up.
Step 2: Select Your Identity Provider
After installing, you'll be redirected to the SSO configuration page. Select Microsoft Entra ID and click Connect.
Step 3: Create The Detrack App In Microsoft Entra
In a new tab, go to the Microsoft Entra admin centre and sign in with your admin account.
In the left sidebar, go to Applications > Enterprise applications.
Click + New application at the top.
Click + Create your own application.
Enter Detrack as the app name, select Integrate any other application you don't find in the gallery (Non-gallery), then click Create.
Step 4: Assign Users To The Detrack App
Before setting up SSO, make sure the users who need access to Detrack are added:
In your new Detrack app, go to Users and groups in the sidebar.
Click + Add user/group.
Select the users or groups who should have access to Detrack.
Click Select.
Step 5: Set Up SAML SSO In Microsoft
In your Detrack app, go to Single sign-on in the sidebar.
Select SAML as the sign-on method.
In the Basic SAML Configuration section, click Edit.
Step 6: Copy Detrack Values To Microsoft Entra
Back in Detrack, you'll see two values you need to paste into Microsoft Entra:
Entity ID - Paste into the Identifier (Entity ID) field in Microsoft
ACS URL / Reply URL - Paste into the Reply URL (Assertion Consumer Service URL) field in Microsoft
Click the copy button next to each field to copy the value, then click Save in Microsoft.
Step 7: Copy Microsoft Values Back To Detrack
Still in your Detrack app in Microsoft, find the SAML Certificates section. Copy the App Federation Metadata Url and paste it into Detrack.
Back in Detrack, paste the value in one of these fields:
Federation metadata URL (recommended) - Detrack refreshes this automatically, so Microsoft's routine certificate changes will not interrupt sign-in.
Federation metadata XML - If you paste the file instead of the URL, Detrack cannot refresh it for you and you will need to upload it again before the certificate expires.
Click Save and connect to activate the SSO connection.
Confirming SSO Is Active
Once connected, the SSO page will display:
Active status badge at the top
Directory (tenant) ID and Microsoft identifier
Verified on date
Certificate expires date with days remaining
Note: To update any of your configured details, you'll need to disconnect SSO and set it up again.
Step 8: Add Users Who Sign In With Microsoft
Once SSO is active, you can invite users to sign in with their Microsoft account.
Go to Users and click Add User. Fill in the user details and check This person signs in with Microsoft.
The user will be invited as usual and set a Detrack password, then connect Microsoft when they first sign in.
Disconnecting SSO
To disconnect SSO, click the Active status badge at the top-right of the SSO page.
Click Disconnect to confirm.