> ## Documentation Index
> Fetch the complete documentation index at: https://learn.nexudus.com/llms.txt
> Use this file to discover all available pages before exploring further.

# Azure Active Directory

> Let customers and admins sign in to Nexudus with their Microsoft work account through Azure Active Directory (Microsoft Entra ID), including Azure AD B2C.

## Overview

The **Azure Active Directory** integration lets people sign in to Nexudus with their Microsoft account, managed in your Azure Active Directory (now Microsoft Entra ID) tenant. It also works with an **Azure AD B2C** tenant, which lets customers sign in with their own organisation's directory or social accounts.

The integration is free. You need a Microsoft Azure account.

## Setting up Azure Active Directory

**1. Copy your redirect URI**

Go to **Settings → Integrations → Azure Active Directory**, turn on **Enable Azure Active Directory integration.**, and copy the **Redirect URI**.

**2. Register an app in Azure**

In the Azure portal, open **Microsoft Entra ID → App registrations → New registration**. Name it clearly — for example *Nexudus Login – Kalkio Spaces* — and add the redirect URI as a **Web** redirect URI. One app covers all your locations if everyone signs in against the same directory.

**3. Copy the IDs and create a secret**

Copy the app's **Application (client) ID** and **Directory (tenant) ID**. Under **Certificates & secrets**, create a **New client secret** and copy its **Value** (not its ID).

**4. Finish in Nexudus**

Enter the **Tenant ID**, **Client ID** and **Client Secret**, set a **Sign in button label**, choose the [shared SSO options](https://learn.nexudus.com/integrations/sso.md#options-every-sso-integration-shares), and save.

![Azure Active Directory settings](https://mintcdn.com/nexudus/_vKYV6BblXHm7HHO/images/integrations/int-ad.png?fit=max\&auto=format\&n=_vKYV6BblXHm7HHO\&q=85\&s=8beeb988b2151c89b5e00b60b82d98e5)

The settings also show a **Login URI**, a direct link that signs people in through Azure — useful for a link on your website or intranet.

> [!WARNING]
>
> Client secrets expire. Create a new one before it does and update **Client Secret** in Nexudus, or nobody will be able to sign in through Azure. Set yourself a reminder as well as relying on Azure's.

## Azure AD B2C

For a B2C tenant, register the app in your B2C tenant and choose **Accounts in any identity provider or organizational directory (for authenticating users with user flows)** as the supported account types. You also need a **user flow**, which decides which details the directory shares with Nexudus. Then complete the same steps above.

## Related

* [Single sign-on](https://learn.nexudus.com/integrations/sso.md) — shared SSO options
* [Microsoft Teams](https://learn.nexudus.com/integrations/scheduling/microsoft-teams.md) — booking from inside Teams


This documentation is built and hosted on [Mintlify](https://mintlify.com), a developer documentation platform.