Configure Single Sign-On with Azure Active Directory

If you have a cloud-based Microsoft Azure Active Directory (AD), you can now enable single sign-on using the Microsoft Azure AD identity provider. This option is available to both on-premises and SaaS clients.

The setup process requires you to first configure the Azure AD instance, according to your wider organizational need, and then you register the PIM application against the preconfigured Azure AD instance. After you register PIM in Azure AD, you then use the app IDs issued by Azure to configure single sign-on in PIM.