---
title: "Single sign-on (SSO)"
slug: "sso"
updated: 2025-07-23T07:47:16Z
published: 2025-07-23T07:47:16Z
canonical: "help.campos.ch/sso"
stale: true
---

> ## Documentation Index
> Fetch the complete documentation index at: https://help.campos.ch/llms.txt
> Use this file to discover all available pages before exploring further.

# Single sign-on (SSO)

### Microsoft Entra ID

1. Communicate your `tenant ID` to devteam@icfm.ch
2. We will configure your tenant in Campos accordingly and communicate back the admin consent link, in the form of:  

`https://login.microsoftonline.com/{your tenant ID}/adminconsent?client_id={Campos client ID}`  

For more information, see [https://learn.microsoft.com/en-us/entra/identity/enterprise-apps/grant-admin-consent?pivots=portal#construct-the-url-for-granting-tenant-wide-admin-consent](https://learn.microsoft.com/en-us/entra/identity/enterprise-apps/grant-admin-consent?pivots=portal#construct-the-url-for-granting-tenant-wide-admin-consent)
3. After granting tenant-wide admin consent (permissions `profile` and `User.Read` and claims `email`, `given_name` und `family_name` are requested), the SSO configuration is finished.

### OpenID Connect

Contact devteam@icfm.ch to schedule a short Microsoft Teams meeting to setup SSO. The following claims are required:

- sub
- email
- given_name
- family_name

It is recommended to use a stable ID for the `sub` claim that never changes (like a GUID) and avoid unstable attributes like email address (may change on marriage).

### ADFS with SAML2

1. Communicate the `entityID` (authority-URL) to devteam@icfm.ch
2. We will add your identity provider and give you the URL for the SAML metadata XML. It will look like https://signin.campos.ch/saml2/{your auth scheme }
3. Import the metadata XML
4. Typical claim rules:

- User-Principal-Name -> email
- Given-Name -> given_name
- Surname -> family_name
- ObjectGUID -> Name ID
  - ObjectGUID is an ID that [never changes](https://docs.microsoft.com/en-us/previous-versions/windows/it-pro/windows-2000-server/cc961625(v=technet.10)?redirectedfrom=MSDN)
  - it is possible that the ObjectGUID is not in the drop down, [just type it in](https://nzpcmad.blogspot.com/2011/09/adfs-selecting-claim-thats-not-in.html)  

![image.png](https://cdn.document360.io/00a27776-6f44-4ca5-aa65-43f33eeda32b/Images/Documentation/image-XCV5V60H.png)