ClayHR integration with Azure AD provides Single Sign On (SSO) to login to the application using the Azure Active Directory and extends the functionality of user provisioning.

This feature is available to all customers that have an active Azure AD account, out of the box.

Configuring Your ClayHR to Allow Microsoft SSO Login

You need to be a ClayHR site administrator to perform this operation.

Simply login to your ClayHR instance and enable Azure AD login in the setup module as shown in the snapshot.

Azure AD Setup in ClayHR

‍

Setting the up the ClayHR app from Microsoft Marketplace

Your Azure/Entra Active Directory Administrator can also install the ClayHR Entra ID app from the Microsoft Marketplace.

(Depending on your Microsoft's directory's access settings, this step may not be required.)

Once this is enabled, your Azure Active Directory Admin can simply click on “Login with Azure AD” on the login page, and accept the permissions requested. This will lead to log in to ClayHR Account.

Now, all the users present in the Active Directory and ClayHR Account can smoothly Login into the system using Azure AD.

Recommend Practice

Once your SSO is configured with Microsoft and is working correctly, for added security, we also recommend disabling login using the ClayHR login form. All your users will then be required to log in using Azure AD only.

Also see: Who can log in to ClayHR using SSO?

Debugging Azure AD and ClayHR Login Issues

Sometimes some users may be unable to login to ClayHR using Azure AD.  More often than not, this problem is related to the users being able to login to Azure AD itself.

If you find that NONE of your users are able to login to ClayHR using Azure AD, please contact your ClayHR account manager.

If you find that some of your users are able to login to ClayHR using Azure AD, and some are not, in that case, please follow the following steps first: For the users who are not able to login to ClayHR using Azure AD, have them navigate to: https://portal.office.com  If they are properly logged into Azure AD, they should be able to login to the Microsoft Office portal, and they should see their initials/picture in the top right hand corner.  If they don't see that, that means they are not logged into Azure at all, and in that case, they should login to Azure first by clicking on the Login link.  If they are unable to login, please contact your Azure AD team.

‍

‍