Connect TrainMeUK to Microsoft 365 (Single Sign-On)

---

🔄 Step-by-step

1. In TrainMeUK

• Go to: https://app.trainmeuk.co.uk/admin/settings → SSO & Provisioning
• Copy the Redirect URI shown on screen (leave this page open). You'll need to paste this into Microsoft Entra ID later.

---

2. In Microsoft Entra ID

• Go to: entra.microsoft.com → App registrations → New registration
• Name: TrainMeUK SSO
• Supported account types: Accounts in this organizational directory only (Single tenant)
• Redirect URI: paste the one you copied from TrainMeUK.
• Click Register.

---

3. Collect details from Microsoft

From the app you just created in App registrations:

• Copy Application (client) ID → this will be your Client ID in TrainMeUK.
• Copy Directory (tenant) ID → this will be your Tenant ID in TrainMeUK.
• Go to Certificates & secrets → New client secret → copy the secret value (you'll need this once).

---

4. Turn on sign-in tokens

• In Authentication, tick ID tokens → Save.

---

5. Back in TrainMeUK

Paste the values you collected:

• Tenant ID → from Directory (tenant) ID
• Client ID → from Application (client) ID
• Client Secret → the secret value you created
• Click Enable SSO → Save ✅

---

🧪 Test it

• Log out of TrainMeUK
• Click Sign in with Microsoft
• Use a normal staff account → you should go straight in ✅

---

💡 If something breaks

• "Needs admin approval" → A Microsoft admin must log in once to approve.
• Redirect error → Check the Redirect URL in TrainMeUK and Entra ID match exactly.