{"id":128193,"date":"2026-10-16T10:16:43","date_gmt":"2026-10-16T08:16:43","guid":{"rendered":"https:\/\/www.acceptmission.com\/knowledge\/configure-single-sign-on-with-accept-mission\/"},"modified":"2026-10-16T10:41:46","modified_gmt":"2026-10-16T08:41:46","password":"","slug":"configure-single-sign-on-with-accept-mission","status":"publish","type":"docs","link":"https:\/\/www.acceptmission.com\/de\/knowledge\/configure-single-sign-on-with-accept-mission\/","title":{"rendered":"Single Sign-On mit Accept Mission konfigurieren"},"content":{"rendered":"<h1 class=\"wp-block-heading\">Single Sign-On mit Accept Mission konfigurieren<\/h1>\n\n\n\n<p class=\"wp-block-paragraph\">This guide explains how an organisation&#8217;s IT administrator can configure Single Sign-On (SSO) for Accept Mission using Microsoft Entra ID, formerly called Azure Active Directory or Azure AD.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">The setup creates a trust relationship between Accept Mission and your organisation&#8217;s Microsoft identity platform. Users can then sign in to the Accept Mission environment through the organisation&#8217;s identity provider.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Dieser Leitfaden richtet sich an IT-Administratoren, die App-Registrierungen und Berechtigungen in Microsoft Entra ID verwalten k\u00f6nnen.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">Was Sie von Accept Mission ben\u00f6tigen<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">Before you begin, ask your Accept Mission contact for:<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li>Your Accept Mission application subdomain<\/li>\n\n\n\n<li>Die genaue Weiterleitungs-URI<\/li>\n\n\n\n<li>Die genaue URL zum Abmelden<\/li>\n\n\n\n<li>Etwaige kundenspezifische Konfigurationsanweisungen<\/li>\n<\/ul>\n\n\n\n<p class=\"wp-block-paragraph\">The redirect URI and logout URL are specific to your Accept Mission environment. Do not substitute values from another organisation.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">Erforderliche Microsoft Entra-Berechtigungen<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">Sie ben\u00f6tigen eine Berechtigung, um Unternehmensanwendungen oder App-Registrierungen in Microsoft Entra ID zu verwalten. Je nach Konfiguration Ihrer Organisation ist m\u00f6glicherweise eine der folgenden Rollen erforderlich:<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li>Anwendungsadministrator<\/li>\n\n\n\n<li>Anwendungsentwickler<\/li>\n\n\n\n<li>Cloud-Anwendungsadministrator<\/li>\n<\/ul>\n\n\n\n<p class=\"wp-block-paragraph\">M\u00f6glicherweise ben\u00f6tigen Sie au\u00dferdem die Berechtigung, die Zustimmung des Administrators f\u00fcr delegierte Berechtigungen in Microsoft Graph zu erteilen.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">Schritt 1: Registrieren Sie die Accept Mission-Anwendung<\/h2>\n\n\n\n<ol class=\"wp-block-list\">\n<li>Melden Sie sich bei der <a href=\"https:\/\/entra.microsoft.com\">Microsoft Entra-Verwaltungscenter<\/a>.<\/li>\n\n\n\n<li>Wenn Sie mehr als einen Mandanten verwalten, w\u00e4hlen Sie das richtige Verzeichnis aus.<\/li>\n\n\n\n<li>Gehe zu <strong>Entra ID \u2192 App-Registrierungen \u2192 Neue Registrierung<\/strong>.<\/li>\n\n\n\n<li>Geben Sie einen aussagekr\u00e4ftigen Anzeigenamen ein, zum Beispiel <strong>Accept Mission SSO<\/strong>.<\/li>\n\n\n\n<li>Select the sign-in audience required by your organisation and Accept Mission&#8217;s instructions.<\/li>\n\n\n\n<li>Gehen <strong>Weiterleitungs-URI<\/strong> Bei dieser Erstanmeldung ist das Feld leer. Es wird im n\u00e4chsten Schritt erg\u00e4nzt.<\/li>\n\n\n\n<li>W\u00e4hlen <strong>Registrieren<\/strong>.<\/li>\n\n\n\n<li>Kopiere die <strong>Anwendungs-ID (Client-ID)<\/strong> und <strong>Verzeichnis-ID (Mieter)<\/strong>. These values are needed by Accept Mission.<\/li>\n<\/ol>\n\n\n\n<p class=\"wp-block-paragraph\">Der Anzeigename kann sp\u00e4ter ge\u00e4ndert werden. Die Anwendungs-ID (Client-ID) dient als eindeutige Kennung der Registrierung.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">Schritt 2: Konfigurieren Sie die Webplattform und die Umleitungs-URI<\/h2>\n\n\n\n<ol class=\"wp-block-list\">\n<li>\u00d6ffnen Sie die Registrierung f\u00fcr die neue App.<\/li>\n\n\n\n<li>Unter <strong>Verwalten<\/strong>, w\u00e4hlen <strong>Authentifizierung<\/strong>.<\/li>\n\n\n\n<li>W\u00e4hlen <strong>Plattform hinzuf\u00fcgen<\/strong>.<\/li>\n\n\n\n<li>W\u00e4hlen Sie <strong>Web<\/strong>.<\/li>\n\n\n\n<li>Enter the exact redirect URI provided by Accept Mission.<\/li>\n\n\n\n<li>Enter the exact front-channel logout URL provided by Accept Mission.<\/li>\n\n\n\n<li>Speichern Sie die Konfiguration.<\/li>\n<\/ol>\n\n\n\n<p class=\"wp-block-paragraph\">The redirect URI is where Microsoft Entra ID sends the user after authentication. The logout URL signs the user out of the Accept Mission environment.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Eine Weiterleitungs-URI hat in der Regel folgendes Format:<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><code>https:\/\/&lt;your-subdomain&gt;.acceptmission.com\/auth\/azure_oauth2\/callback<\/code><\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Eine Abmelde-URL hat in der Regel folgendes Format:<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><code>https:\/\/&lt;your-subdomain&gt;.acceptmission.com\/logout<\/code><\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Verwenden Sie die f\u00fcr Ihre Umgebung angegebenen genauen Werte.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">Schritt 3: Erstellen Sie ein Client-Geheimnis<\/h2>\n\n\n\n<ol class=\"wp-block-list\">\n<li>Gehen Sie bei der App-Registrierung zu <strong>Zertifikate und Geheimnisse<\/strong>.<\/li>\n\n\n\n<li>Unter <strong>Kundengeheimnisse<\/strong>, w\u00e4hlen <strong>Neues Client-Geheimnis<\/strong>.<\/li>\n\n\n\n<li>Geben Sie eine aussagekr\u00e4ftige Beschreibung ein, zum Beispiel <strong>Accept Mission SSO<\/strong>.<\/li>\n\n\n\n<li>Select an expiry period. Microsoft Entra client secrets can be valid for up to 24 months. Accept Mission recommends selecting <strong>730 Tage (24 Monate)<\/strong> es sei denn, Ihre Organisation schreibt eine k\u00fcrzere Frist vor.<\/li>\n\n\n\n<li>W\u00e4hlen <strong>hinzuf\u00fcgen<\/strong>.<\/li>\n\n\n\n<li>Kopieren Sie sofort den Schl\u00fcssel <strong>Wert<\/strong>.<\/li>\n<\/ol>\n\n\n\n<p class=\"wp-block-paragraph\">Important: Accept Mission needs the client secret <strong>Wert<\/strong>, nicht das <strong>Geheime ID<\/strong>. Der vollst\u00e4ndige Wert wird erst bei der Erstellung des Geheimnisses angezeigt.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Geben Sie das Passwort niemals in einer gew\u00f6hnlichen E-Mail, einem Screenshot, einem Ticket oder diesem Dokument preis. Nutzen Sie Ihre genehmigte sichere \u00dcbermittlungsmethode.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">Schritt 4: Token-Claims konfigurieren<\/h2>\n\n\n\n<ol class=\"wp-block-list\">\n<li>Unter <strong>Verwalten<\/strong>, \u00f6ffnen <strong>Token-Konfiguration<\/strong>.<\/li>\n\n\n\n<li>F\u00fcgen Sie die folgenden ID-Token-Claims hinzu:<\/li>\n<\/ol>\n\n\n\n<figure class=\"wp-block-table\"><table>\n<thead>\n<tr>\n<th>Behauptung<\/th>\n<th>Token-Typ<\/th>\n<th>Erforderlich<\/th>\n<\/tr>\n<\/thead>\n<tbody>\n<tr>\n<td>E-Mail<\/td>\n<td>ID<\/td>\n<td>Ja<\/td>\n<\/tr>\n<tr>\n<td>Nachname<\/td>\n<td>ID<\/td>\n<td>Ja<\/td>\n<\/tr>\n<tr>\n<td>Vorname<\/td>\n<td>ID<\/td>\n<td>Ja<\/td>\n<\/tr>\n<tr>\n<td>Profilbild<\/td>\n<td>ID<\/td>\n<td>Nein<\/td>\n<\/tr>\n<\/tbody>\n<\/table><\/figure>\n\n\n\n<p class=\"wp-block-paragraph\">The optional profile_picture claim can be used to create the user&#8217;s profile picture in Accept Mission. It may require additional internal permissions.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">Schritt 5: Microsoft Graph-Berechtigungen konfigurieren<\/h2>\n\n\n\n<ol class=\"wp-block-list\">\n<li>Unter <strong>Verwalten<\/strong>, \u00f6ffnen <strong>API-Berechtigungen<\/strong>.<\/li>\n\n\n\n<li>W\u00e4hlen <strong>Berechtigung hinzuf\u00fcgen<\/strong>.<\/li>\n\n\n\n<li>W\u00e4hlen <strong>Microsoft Graph<\/strong>.<\/li>\n\n\n\n<li>W\u00e4hlen <strong>Delegierte Berechtigungen<\/strong>.<\/li>\n\n\n\n<li>F\u00fcgen Sie folgende Berechtigungen hinzu:<\/li>\n<\/ol>\n\n\n\n<ul class=\"wp-block-list\">\n<li>E-Mail<\/li>\n\n\n\n<li>Profil<\/li>\n\n\n\n<li>User.Read<\/li>\n<\/ul>\n\n\n\n<ol class=\"wp-block-list\">\n<li>W\u00e4hlen <strong>Berechtigungen hinzuf\u00fcgen<\/strong>.<\/li>\n\n\n\n<li>W\u00e4hlen <strong>Grant admin consent<\/strong> f\u00fcr Ihre Organisation.<\/li>\n\n\n\n<li>Vergewissern Sie sich, dass die erforderlichen Berechtigungen als \u201egew\u00e4hrt\u201c angezeigt werden.<\/li>\n<\/ol>\n\n\n\n<p class=\"wp-block-paragraph\">Granting administrator consent prevents each user from being asked to consent individually during sign-in. Without the required consent, a user&#8217;s account may not be created correctly in Accept Mission.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">Schritt 6: Senden Sie die Konfigurationsdaten sicher ab<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">After the configuration is complete, send the following to your Accept Mission contact using an approved secure transfer method:<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li>Best\u00e4tigung, dass die Konfiguration abgeschlossen ist<\/li>\n\n\n\n<li>Anwendungs-ID (Client-ID)<\/li>\n\n\n\n<li>Verzeichnis-ID (Mieter)<\/li>\n\n\n\n<li>Client-Geheimnis <strong>Wert<\/strong><\/li>\n<\/ul>\n\n\n\n<p class=\"wp-block-paragraph\">Do not send the client secret through ordinary email. Accept Mission will use these details to complete the connection and test the sign-in flow.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">Schritt 7: Testen Sie die SSO-Verbindung<\/h2>\n\n\n\n<ol class=\"wp-block-list\">\n<li>Confirm that Accept Mission has completed the configuration.<\/li>\n\n\n\n<li>Open the Accept Mission environment using the customer URL.<\/li>\n\n\n\n<li>Melden Sie sich mit einem bestehenden Organisationskonto an.<\/li>\n\n\n\n<li>Vergewissern Sie sich, dass Sie \u00fcber Microsoft Entra ID weitergeleitet werden.<\/li>\n\n\n\n<li>Confirm that you reach the correct Accept Mission environment.<\/li>\n\n\n\n<li>Stellen Sie sicher, dass das Benutzerprofil korrekt angelegt oder erkannt wird.<\/li>\n<\/ol>\n\n\n\n<p class=\"wp-block-paragraph\">If the sign-in fails, confirm that the redirect URI, logout URL, tenant, claims, permissions, consent, and client secret Value are correct. Contact Accept Mission if the issue continues.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">Ein abgelaufenes Client-Secret erneuern<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">This renewal process applies to the existing Accept Mission customer app registration. It does not migrate your organisation to a new enterprise SSO connection.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Die G\u00fcltigkeitsdauer des Client-Geheimnisses kann nicht verl\u00e4ngert werden. Wenn das bestehende Geheimnis bald abl\u00e4uft:<\/p>\n\n\n\n<ol class=\"wp-block-list\">\n<li>Open the existing Accept Mission app registration in Microsoft Entra ID.<\/li>\n\n\n\n<li>Gehe zu <strong>Zertifikate und Geheimnisse \u2192 Client-Geheimnisse \u2192 Neues Client-Geheimnis<\/strong>.<\/li>\n\n\n\n<li>Erstellen Sie ein Ersatzgeheimnis.<\/li>\n\n\n\n<li>Kopiere den Schl\u00fcssel des neuen Geheimnisses <strong>Wert<\/strong>, nicht die geheime ID.<\/li>\n\n\n\n<li>Share the Value securely with your Accept Mission contact together with your organisation name, customer URL, Application (client) ID, and new expiry date.<\/li>\n\n\n\n<li>Ask Accept Mission to update the connection.<\/li>\n\n\n\n<li>Testen Sie die Anmeldung mit einem bestehenden Konto.<\/li>\n\n\n\n<li>Entfernen Sie das alte Passwort erst dann, wenn der Ersatz getestet wurde und die Richtlinien Ihrer Organisation dies zulassen.<\/li>\n\n\n\n<li>Notieren Sie sich das neue Ablaufdatum und planen Sie die n\u00e4chste Verl\u00e4ngerung im Voraus.<\/li>\n<\/ol>\n\n\n\n<p class=\"wp-block-paragraph\">Do not delete the app registration. Keep the client ID, tenant ID, redirect URI, logout URL, claims, and permissions unchanged unless Accept Mission instructs you otherwise.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">Wichtige Sicherheitshinweise<\/h2>\n\n\n\n<ul class=\"wp-block-list\">\n<li>Verwenden Sie bei der Erneuerung eines Geheimnisses die bestehende Registrierung der Kunden-App.<\/li>\n\n\n\n<li>Geben Sie ein Client-Secret niemals in Screenshots oder gew\u00f6hnlichen E-Mails preis.<\/li>\n\n\n\n<li>Geben Sie Zugangsdaten ausschlie\u00dflich \u00fcber eine zugelassene, sichere \u00dcbertragungsmethode weiter.<\/li>\n\n\n\n<li>Do not share the Secret ID when Accept Mission needs the secret Value.<\/li>\n\n\n\n<li>Testen Sie die Verbindung, bevor Sie ein altes Geheimnis au\u00dfer Gebrauch nehmen.<\/li>\n\n\n\n<li>Contact Accept Mission if you are unsure which app registration belongs to your environment.<\/li>\n<\/ul>\n\n\n\n<p class=\"wp-block-paragraph\">Bei Fragen zur Sicherheit wenden Sie sich bitte an <strong>security@acceptmission.com<\/strong>.<\/p>","protected":false},"excerpt":{"rendered":"<p>Configure Single Sign-On with Accept Mission This guide explains how an organisation&#8217;s IT administrator can configure Single Sign-On (SSO) for Accept Mission using Microsoft Entra ID, formerly called Azure Active Directory or Azure AD. The setup creates a trust relationship between Accept Mission and your organisation&#8217;s Microsoft identity platform. Users can then sign in to  [&#8230;]<\/p>\n","protected":false},"author":38,"featured_media":0,"comment_status":"closed","ping_status":"closed","template":"","meta":{"_seopress_titles_title":"","_seopress_titles_desc":"","_seopress_robots_index":"","_seopress_robots_follow":"","_seopress_robots_imageindex":"","_seopress_robots_snippet":"","_seopress_robots_primary_cat":"","_seopress_robots_breadcrumbs":"","_seopress_robots_freeze_modified_date":"","_seopress_robots_custom_modified_date":"","_seopress_robots_canonical":"","_seopress_social_fb_title":"","_seopress_social_fb_desc":"","_seopress_social_fb_img":"","_seopress_social_fb_img_attachment_id":0,"_seopress_social_fb_img_width":0,"_seopress_social_fb_img_height":0,"_seopress_social_twitter_title":"","_seopress_social_twitter_desc":"","_seopress_social_twitter_img":"","_seopress_social_twitter_img_attachment_id":0,"_seopress_social_twitter_img_width":0,"_seopress_social_twitter_img_height":0,"_seopress_redirections_value":"","_seopress_redirections_enabled":"","_seopress_redirections_enabled_regex":"","_seopress_redirections_logged_status":"","_seopress_redirections_param":"","_seopress_redirections_type":0,"_seopress_analysis_target_kw":"","_seopress_news_disabled":"","_seopress_video_disabled":"","_seopress_video":[],"_seopress_pro_schemas_manual":[],"_seopress_pro_rich_snippets_disable_all":"","_seopress_pro_rich_snippets_disable":[],"_seopress_pro_schemas":[],"content-type":"","footnotes":"","_members_access_role":[],"_members_access_error":""},"doc_category":[313],"doc_tag":[348,349,347],"glossaries":[],"knowledge_base":[310],"class_list":["post-128193","docs","type-docs","status-publish","hentry","doc_category-security-trust","doc_tag-microsoft-entra-id","doc_tag-security","doc_tag-sso","knowledge_base-trust-center"],"year_month":"2026-10","word_count":1027,"total_views":"1","reactions":{"happy":"0","normal":"0","sad":"0"},"author_info":{"name":"Sofia Limkilde","author_nicename":"sofia-limkildeacceptmission-com","author_url":"#"},"doc_category_info":[{"term_name":"Security &amp; Trust","term_url":"https:\/\/www.acceptmission.com\/de\/knowledge\/trust-center\/security-trust\/"}],"doc_tag_info":[{"term_name":"Microsoft Entra ID","term_url":"https:\/\/www.acceptmission.com\/de\/knowledge-tag\/microsoft-entra-id\/"},{"term_name":"Security","term_url":"https:\/\/www.acceptmission.com\/de\/knowledge-tag\/security\/"},{"term_name":"SSO","term_url":"https:\/\/www.acceptmission.com\/de\/knowledge-tag\/sso\/"}],"knowledge_base_info":[{"term_name":"Accept Mission Trust Center","term_url":"https:\/\/www.acceptmission.com\/de\/knowledge\/trust-center\/","term_slug":"trust-center"}],"knowledge_base_slug":["trust-center"],"_links":{"self":[{"href":"https:\/\/www.acceptmission.com\/de\/wp-json\/wp\/v2\/docs\/128193","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.acceptmission.com\/de\/wp-json\/wp\/v2\/docs"}],"about":[{"href":"https:\/\/www.acceptmission.com\/de\/wp-json\/wp\/v2\/types\/docs"}],"author":[{"embeddable":true,"href":"https:\/\/www.acceptmission.com\/de\/wp-json\/wp\/v2\/users\/38"}],"replies":[{"embeddable":true,"href":"https:\/\/www.acceptmission.com\/de\/wp-json\/wp\/v2\/comments?post=128193"}],"version-history":[{"count":1,"href":"https:\/\/www.acceptmission.com\/de\/wp-json\/wp\/v2\/docs\/128193\/revisions"}],"predecessor-version":[{"id":128206,"href":"https:\/\/www.acceptmission.com\/de\/wp-json\/wp\/v2\/docs\/128193\/revisions\/128206"}],"wp:attachment":[{"href":"https:\/\/www.acceptmission.com\/de\/wp-json\/wp\/v2\/media?parent=128193"}],"wp:term":[{"taxonomy":"doc_category","embeddable":true,"href":"https:\/\/www.acceptmission.com\/de\/wp-json\/wp\/v2\/doc_category?post=128193"},{"taxonomy":"doc_tag","embeddable":true,"href":"https:\/\/www.acceptmission.com\/de\/wp-json\/wp\/v2\/doc_tag?post=128193"},{"taxonomy":"glossaries","embeddable":true,"href":"https:\/\/www.acceptmission.com\/de\/wp-json\/wp\/v2\/glossaries?post=128193"},{"taxonomy":"knowledge_base","embeddable":true,"href":"https:\/\/www.acceptmission.com\/de\/wp-json\/wp\/v2\/knowledge_base?post=128193"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}