---
title: "Configuring Microsoft Active Directory as Identity Provider"
slug: "configuring-microsoft-active-directory-as-identity-provider"
updated: 2026-03-02T06:36:59Z
published: 2026-03-02T06:36:59Z
canonical: "help.scalefusion.com/configuring-microsoft-active-directory-as-identity-provider"
---

> ## Documentation Index
> Fetch the complete documentation index at: https://help.scalefusion.com/llms.txt
> Use this file to discover all available pages before exploring further.

# Configuring Microsoft Active Directory as Identity Provider

Microsoft Active Directory (AD) is a directory service developed by Microsoft for managing and organizing resources in a network. verifies the identity of users and devices before granting access to network resources. This is usually done via a username and password.

This article provides a step-by-step guide to configuring Microsoft Active Directory as the Identity Provider for all your services.

## Prerequisites

1. Please ensure you have created the SSO configuration for the service you want to access and set Microsoft Active Directory as its Identity Provider.
2. Also, ensure that the user(s) is present in the Microsoft Active Directory and the respective service portal that you are trying to access.
3. The same user(s) must be present in Scalefusion and the SSO configuration of the respective service is applied to it.

## Step 1: Configuring Microsoft Active Directory as an Identity Provider on Scalefusion dashboard

1. Navigate to **OneIdP** > **Identity Providers**.
2. Click on the **New Provider** button.

![](https://cdn.document360.io/175c0eac-012f-4410-bdc5-ac60794f82d8/Images/Documentation/image-DB46RKCH.png)
3. Select **Microsoft Active Directory**, then click **Configure**.

![](https://cdn.document360.io/175c0eac-012f-4410-bdc5-ac60794f82d8/Images/Documentation/image-F9OMFQNX.png)
4. You will see a message as shown below if you have not set up the **On-Prem Connector** and completed the configuration.

![](https://cdn.document360.io/175c0eac-012f-4410-bdc5-ac60794f82d8/Images/Documentation/image-12R0YB8K.png)
5. Click on the **Finish** button.
6. Please refer to [our guide](/docs/install-and-configure-on-premise-connector-on-a-windows-servermachine) on setting up the On-Prem Connector.

## Step 2: Associating Active Directory Identity Provider with a Directory

1. Navigate to **OneIdP** > **Directory**.
2. Click on the **3-dots** under **Actions** for the concerned Domain.
3. Click on **Settings**.

![](https://cdn.document360.io/175c0eac-012f-4410-bdc5-ac60794f82d8/Images/Documentation/image-YM1N80N4.png)
4. Go to the **Federated Authentication** tab and toggle on the “**Enable Scalefusion OnPremise Connector as Authentication source”** button. Click **Next** and **Save** it.

![](https://cdn.document360.io/175c0eac-012f-4410-bdc5-ac60794f82d8/Images/Documentation/image-820XVZDO.png)
5. This completes the setup. The users will see the Active Directory page for authentication whenever they access an application.

#### User Login Flow

When the user enters their email on the service login page, they will be redirected to OneIdP. From there, OneIdP will redirect the user to the chosen identity provider (Microsoft Active Directory, in this case) for authentication. Once the identity provider authenticates the user, they will be granted access to the service.