> ## Documentation Index
> Fetch the complete documentation index at: https://support.visualcare.com.au/llms.txt
> Use this file to discover all available pages before exploring further.

# Single sign-on (SSO) setup

> Set up single sign-on for Visualcare using Microsoft Azure Active Directory

This guide walks you through setting up single sign-on (SSO) for your Visualcare VCore environment using Microsoft Azure Active Directory (Azure AD). Once configured, your team can sign in to Visualcare using their existing Microsoft credentials.

<Note>SSO is only available in VCore.</Note>

## What you'll need

* A Microsoft Azure account with an active subscription
* Permission to manage applications in Azure AD (Application Administrator, Application Developer, or Cloud Application Administrator role)
* The Microsoft "Set up a tenant" quickstart completed

## Instructions

<Steps>
  <Step title="Register Visualcare in Azure">
    1. Sign in to the Azure portal
    2. If you have access to multiple tenants, use the **Directories + subscriptions** filter in the top menu to switch to the correct tenant
    3. Search for and select **Azure Active Directory**
    4. Under **Manage**, select **App registrations**, then select **New registration**
    5. Enter a display name for your application (your users may see this name when signing in)
    6. Set the sign-in audience - usually "Accounts in this organisational directory only"
    7. Leave **Redirect URI** blank for now
    8. Click **Register**

    The Azure portal displays the app registration's **Overview** pane. Note the **Application (client) ID** - you'll need this later.

    <Tip>New app registrations are hidden to users by default. When you're ready for users to see the app on their My Apps page, go to **Azure Active Directory** → **Enterprise applications**, select the app, then on the **Properties** page toggle "Visible to users?" to **Yes**.</Tip>
  </Step>

  <Step title="Add the redirect URI">
    Use the following URL as the redirect URI:

    ```
    https://app.visualcare.com.au/inc/export/microsoft/index.php
    ```
  </Step>

  <Step title="Configure platform settings">
    1. In the Azure portal, in **App registrations**, select your application
    2. Under **Manage**, select **Authentication**
    3. Under **Platform configurations**, select **Add a platform**
    4. Select **Web**
    5. In the **Redirect URIs** text box, enter: `https://app.visualcare.com.au/inc/export/microsoft/index.php`
    6. Click **Configure**
  </Step>

  <Step title="Create a client secret">
    1. In **App registrations**, select your application
    2. Select **Certificates & secrets**, then **Client secrets**, then **New client secret**
    3. Add a description for the secret
    4. Select an expiration (maximum two years)
    5. Click **Add**
    6. Copy the secret value immediately

    <Warning>The secret value is only displayed once. If you navigate away from this page, you won't be able to view the secret again and will need to create a new one.</Warning>
  </Step>

  <Step title="Send credentials to Visualcare">
    Provide the following three values to your Visualcare contact:

    1. **Application (client) ID** - found on the **Overview** tab
    2. **Directory (tenant) ID** - found on the **Overview** tab
    3. **Secret Value** - copied in the previous step

    <Warning>Do not share these credentials with anyone other than Visualcare.</Warning>
  </Step>

  <Step title="Enable SSO for users">
    Once Visualcare has configured SSO on your environment:

    1. Each user needs to log in at least once using their normal Visualcare credentials before SSO is enabled for their account
    2. In VCore, go to the **Users** page
    3. Select a user from the list
    4. Tick the **Enable SSO** box
    5. Click **Save**
    6. Repeat for each user who should use SSO
  </Step>
</Steps>

## Signing in with SSO

Once SSO is enabled for a user, the standard login page no longer works for that user. Instead, use the SSO login page:

```
https://app.visualcare.com.au/login-ms-sso.php
```

<Tip>Bookmark the SSO login URL for easy access. Users with SSO enabled are prompted to sign in with their Microsoft credentials.</Tip>

## Running into issues?

See [Login troubleshooting](/troubleshooting/general) for common errors and fixes.

## Related articles

<CardGroup cols={2}>
  <Card title="Creating users" icon="user-plus" href="/getting-started/creating-users">
    Set up user accounts in Visualcare
  </Card>

  <Card title="User access control" icon="shield-halved" href="/getting-started/user-access-control">
    Configure permissions and access levels
  </Card>
</CardGroup>