{"id":128193,"date":"2026-10-16T10:16:43","date_gmt":"2026-10-16T08:16:43","guid":{"rendered":"https:\/\/www.acceptmission.com\/knowledge\/configure-single-sign-on-with-accept-mission\/"},"modified":"2026-10-16T10:41:46","modified_gmt":"2026-10-16T08:41:46","password":"","slug":"configure-single-sign-on-with-accept-mission","status":"publish","type":"docs","link":"https:\/\/www.acceptmission.com\/fr\/knowledge\/configure-single-sign-on-with-accept-mission\/","title":{"rendered":"Configurer l'authentification unique avec Accept Mission"},"content":{"rendered":"<h1 class=\"wp-block-heading\">Configurer l'authentification unique avec Accept Mission<\/h1>\n\n\n\n<p class=\"wp-block-paragraph\">This guide explains how an organisation&#8217;s IT administrator can configure Single Sign-On (SSO) for Accept Mission using Microsoft Entra ID, formerly called Azure Active Directory or Azure AD.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">The setup creates a trust relationship between Accept Mission and your organisation&#8217;s Microsoft identity platform. Users can then sign in to the Accept Mission environment through the organisation&#8217;s identity provider.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Ce guide s'adresse aux administrateurs informatiques capables de g\u00e9rer les enregistrements d'applications et les autorisations dans Microsoft Entra ID.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">Ce dont vous avez besoin chez Accept Mission<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">Before you begin, ask your Accept Mission contact for:<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li>Your Accept Mission application subdomain<\/li>\n\n\n\n<li>L'URI de redirection exacte<\/li>\n\n\n\n<li>L'URL exacte de d\u00e9connexion<\/li>\n\n\n\n<li>Toute instruction de configuration sp\u00e9cifique au client<\/li>\n<\/ul>\n\n\n\n<p class=\"wp-block-paragraph\">The redirect URI and logout URL are specific to your Accept Mission environment. Do not substitute values from another organisation.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">Autorisations Microsoft Entra requises<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">Vous devez disposer d'une autorisation pour g\u00e9rer les applications d'entreprise ou les enregistrements d'applications dans Microsoft Entra ID. En fonction de la configuration de votre organisation, l'un des r\u00f4les suivants peut \u00eatre requis :<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li>Administrateur d'applications<\/li>\n\n\n\n<li>D\u00e9veloppeur d'applications<\/li>\n\n\n\n<li>Administrateur d'applications cloud<\/li>\n<\/ul>\n\n\n\n<p class=\"wp-block-paragraph\">Il se peut \u00e9galement que vous deviez disposer d'une autorisation pour accorder le consentement de l'administrateur concernant les autorisations d\u00e9l\u00e9gu\u00e9es de Microsoft Graph.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">\u00c9tape 1 : Enregistrer l'application Accept Mission<\/h2>\n\n\n\n<ol class=\"wp-block-list\">\n<li>Connectez-vous \u00e0 la <a href=\"https:\/\/entra.microsoft.com\">Centre d'administration Microsoft Entra<\/a>.<\/li>\n\n\n\n<li>Si vous g\u00e9rez plusieurs locataires, s\u00e9lectionnez le r\u00e9pertoire appropri\u00e9.<\/li>\n\n\n\n<li>Aller \u00e0 <strong>Acc\u00e9der \u00e0 ID \u2192 Enregistrements d'applications \u2192 Nouvel enregistrement<\/strong>.<\/li>\n\n\n\n<li>Saisissez un nom d'affichage clair, tel que <strong>Accept Mission SSO<\/strong>.<\/li>\n\n\n\n<li>Select the sign-in audience required by your organisation and Accept Mission&#8217;s instructions.<\/li>\n\n\n\n<li>Partir <strong>URI de redirection<\/strong> vide lors de cette inscription initiale. Il sera ajout\u00e9 \u00e0 l'\u00e9tape suivante.<\/li>\n\n\n\n<li>S\u00e9lectionner <strong>S'inscrire<\/strong>.<\/li>\n\n\n\n<li>Copiez le <strong>Identifiant de l'application (client)<\/strong> et <strong>Identifiant du r\u00e9pertoire (locataire)<\/strong>. These values are needed by Accept Mission.<\/li>\n<\/ol>\n\n\n\n<p class=\"wp-block-paragraph\">Le nom d'affichage peut \u00eatre modifi\u00e9 ult\u00e9rieurement. L'identifiant de l'application (client) permet d'identifier de mani\u00e8re unique l'enregistrement.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">\u00c9tape 2 : Configurer la plateforme Web et l'URI de redirection<\/h2>\n\n\n\n<ol class=\"wp-block-list\">\n<li>Ouvrez la page d'enregistrement d'une nouvelle application.<\/li>\n\n\n\n<li>Sous <strong>Faire en sorte<\/strong>, s\u00e9lectionnez <strong>Authentification<\/strong>.<\/li>\n\n\n\n<li>S\u00e9lectionner <strong>Ajouter une plateforme<\/strong>.<\/li>\n\n\n\n<li>Choisir <strong>Web<\/strong>.<\/li>\n\n\n\n<li>Enter the exact redirect URI provided by Accept Mission.<\/li>\n\n\n\n<li>Enter the exact front-channel logout URL provided by Accept Mission.<\/li>\n\n\n\n<li>Sauvegarder la configuration.<\/li>\n<\/ol>\n\n\n\n<p class=\"wp-block-paragraph\">The redirect URI is where Microsoft Entra ID sends the user after authentication. The logout URL signs the user out of the Accept Mission environment.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Une URI de redirection se pr\u00e9sente g\u00e9n\u00e9ralement sous le format suivant :<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><code>https:\/\/&lt;your-subdomain&gt;.acceptmission.com\/auth\/azure_oauth2\/callback<\/code><\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Une URL de d\u00e9connexion se pr\u00e9sente g\u00e9n\u00e9ralement sous le format suivant :<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><code>https:\/\/&lt;your-subdomain&gt;.acceptmission.com\/logout<\/code><\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Utilisez les valeurs exactes fournies pour votre environnement.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">\u00c9tape 3 : Cr\u00e9er une cl\u00e9 secr\u00e8te client<\/h2>\n\n\n\n<ol class=\"wp-block-list\">\n<li>Dans la section d'inscription \u00e0 l'application, rendez-vous sur <strong>Certificats et secrets<\/strong>.<\/li>\n\n\n\n<li>Sous <strong>Secrets des clients<\/strong>, s\u00e9lectionnez <strong>Nouveau secret client<\/strong>.<\/li>\n\n\n\n<li>Saisissez une description claire, par exemple : <strong>Accept Mission SSO<\/strong>.<\/li>\n\n\n\n<li>Select an expiry period. Microsoft Entra client secrets can be valid for up to 24 months. Accept Mission recommends selecting <strong>730 jours (24 mois)<\/strong> \u00e0 moins que votre organisation n'exige un d\u00e9lai plus court.<\/li>\n\n\n\n<li>S\u00e9lectionner <strong>Ajouter<\/strong>.<\/li>\n\n\n\n<li>Copiez imm\u00e9diatement le secret <strong>Valeur<\/strong>.<\/li>\n<\/ol>\n\n\n\n<p class=\"wp-block-paragraph\">Important: Accept Mission needs the client secret <strong>Valeur<\/strong>, et non pas le <strong>Identifiant secret<\/strong>. La valeur compl\u00e8te n'appara\u00eet qu'au moment de la cr\u00e9ation du secret.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Ne communiquez jamais cette information confidentielle par e-mail ordinaire, capture d'\u00e9cran, ticket ou dans ce document. Utilisez la m\u00e9thode de transfert s\u00e9curis\u00e9e qui vous a \u00e9t\u00e9 approuv\u00e9e.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">\u00c9tape 4 : Configurer les revendications de jeton<\/h2>\n\n\n\n<ol class=\"wp-block-list\">\n<li>Sous <strong>Faire en sorte<\/strong>, ouvrir <strong>Configuration des jetons<\/strong>.<\/li>\n\n\n\n<li>Ajoutez les revendications de jeton d'identification suivantes :<\/li>\n<\/ol>\n\n\n\n<figure class=\"wp-block-table\"><table>\n<thead>\n<tr>\n<th>All\u00e9gation<\/th>\n<th>Type de jeton<\/th>\n<th>Exig\u00e9e<\/th>\n<\/tr>\n<\/thead>\n<tbody>\n<tr>\n<td>e-mail<\/td>\n<td>ID<\/td>\n<td>Oui<\/td>\n<\/tr>\n<tr>\n<td>nom de famille<\/td>\n<td>ID<\/td>\n<td>Oui<\/td>\n<\/tr>\n<tr>\n<td>pr\u00e9nom<\/td>\n<td>ID<\/td>\n<td>Oui<\/td>\n<\/tr>\n<tr>\n<td>photo_de_profil<\/td>\n<td>ID<\/td>\n<td>Non<\/td>\n<\/tr>\n<\/tbody>\n<\/table><\/figure>\n\n\n\n<p class=\"wp-block-paragraph\">The optional profile_picture claim can be used to create the user&#8217;s profile picture in Accept Mission. It may require additional internal permissions.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">\u00c9tape 5 : Configurer les autorisations Microsoft Graph<\/h2>\n\n\n\n<ol class=\"wp-block-list\">\n<li>Sous <strong>Faire en sorte<\/strong>, ouvrir <strong>Autorisations API<\/strong>.<\/li>\n\n\n\n<li>S\u00e9lectionner <strong>Ajouter une autorisation<\/strong>.<\/li>\n\n\n\n<li>S\u00e9lectionner <strong>Microsoft Graph<\/strong>.<\/li>\n\n\n\n<li>S\u00e9lectionner <strong>Autorisations d\u00e9l\u00e9gu\u00e9es<\/strong>.<\/li>\n\n\n\n<li>Ajoutez les autorisations suivantes :<\/li>\n<\/ol>\n\n\n\n<ul class=\"wp-block-list\">\n<li>e-mail<\/li>\n\n\n\n<li>profil<\/li>\n\n\n\n<li>User.Read<\/li>\n<\/ul>\n\n\n\n<ol class=\"wp-block-list\">\n<li>S\u00e9lectionner <strong>Ajouter des autorisations<\/strong>.<\/li>\n\n\n\n<li>S\u00e9lectionner <strong>Grant admin consent<\/strong> pour votre organisation.<\/li>\n\n\n\n<li>V\u00e9rifiez que les autorisations requises apparaissent comme ayant \u00e9t\u00e9 accord\u00e9es.<\/li>\n<\/ol>\n\n\n\n<p class=\"wp-block-paragraph\">Granting administrator consent prevents each user from being asked to consent individually during sign-in. Without the required consent, a user&#8217;s account may not be created correctly in Accept Mission.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">\u00c9tape 6 : Envoyer les informations de configuration en toute s\u00e9curit\u00e9<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">After the configuration is complete, send the following to your Accept Mission contact using an approved secure transfer method:<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li>Confirmation que la configuration est termin\u00e9e<\/li>\n\n\n\n<li>Identifiant de l'application (client)<\/li>\n\n\n\n<li>Identifiant du r\u00e9pertoire (locataire)<\/li>\n\n\n\n<li>Cl\u00e9 secr\u00e8te du client <strong>Valeur<\/strong><\/li>\n<\/ul>\n\n\n\n<p class=\"wp-block-paragraph\">Do not send the client secret through ordinary email. Accept Mission will use these details to complete the connection and test the sign-in flow.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">\u00c9tape 7 : Tester la connexion SSO<\/h2>\n\n\n\n<ol class=\"wp-block-list\">\n<li>Confirm that Accept Mission has completed the configuration.<\/li>\n\n\n\n<li>Open the Accept Mission environment using the customer URL.<\/li>\n\n\n\n<li>Connectez-vous \u00e0 l'aide d'un compte d'organisation existant.<\/li>\n\n\n\n<li>V\u00e9rifiez que vous \u00eates bien redirig\u00e9 via Microsoft Entra ID.<\/li>\n\n\n\n<li>Confirm that you reach the correct Accept Mission environment.<\/li>\n\n\n\n<li>V\u00e9rifiez que le profil utilisateur a bien \u00e9t\u00e9 cr\u00e9\u00e9 ou reconnu correctement.<\/li>\n<\/ol>\n\n\n\n<p class=\"wp-block-paragraph\">If the sign-in fails, confirm that the redirect URI, logout URL, tenant, claims, permissions, consent, and client secret Value are correct. Contact Accept Mission if the issue continues.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">Renouveler un secret client expir\u00e9<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">This renewal process applies to the existing Accept Mission customer app registration. It does not migrate your organisation to a new enterprise SSO connection.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">La dur\u00e9e de validit\u00e9 du secret client ne peut pas \u00eatre prolong\u00e9e. Lorsque le secret existant est sur le point d'expirer :<\/p>\n\n\n\n<ol class=\"wp-block-list\">\n<li>Open the existing Accept Mission app registration in Microsoft Entra ID.<\/li>\n\n\n\n<li>Aller \u00e0 <strong>Certificats et secrets \u2192 Secrets client \u2192 Nouveau secret client<\/strong>.<\/li>\n\n\n\n<li>Cr\u00e9ez un secret de remplacement.<\/li>\n\n\n\n<li>Copiez le nouveau secret <strong>Valeur<\/strong>, et non l'identifiant secret.<\/li>\n\n\n\n<li>Share the Value securely with your Accept Mission contact together with your organisation name, customer URL, Application (client) ID, and new expiry date.<\/li>\n\n\n\n<li>Ask Accept Mission to update the connection.<\/li>\n\n\n\n<li>Testez la connexion avec un compte existant.<\/li>\n\n\n\n<li>Ne supprimez l'ancien secret qu'une fois que son remplacement a \u00e9t\u00e9 test\u00e9 et que la politique de votre organisation l'autorise.<\/li>\n\n\n\n<li>Notez la nouvelle date d'expiration et planifiez le prochain renouvellement \u00e0 l'avance.<\/li>\n<\/ol>\n\n\n\n<p class=\"wp-block-paragraph\">Do not delete the app registration. Keep the client ID, tenant ID, redirect URI, logout URL, claims, and permissions unchanged unless Accept Mission instructs you otherwise.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">Consignes de s\u00e9curit\u00e9 importantes<\/h2>\n\n\n\n<ul class=\"wp-block-list\">\n<li>Utilisez l'enregistrement existant de l'application client lors du renouvellement d'un secret.<\/li>\n\n\n\n<li>Ne mentionnez jamais un secret client dans des captures d'\u00e9cran ou dans un e-mail ordinaire.<\/li>\n\n\n\n<li>Ne communiquez vos identifiants que par le biais d'un moyen de transfert s\u00e9curis\u00e9 et approuv\u00e9.<\/li>\n\n\n\n<li>Do not share the Secret ID when Accept Mission needs the secret Value.<\/li>\n\n\n\n<li>V\u00e9rifiez la connexion avant de d\u00e9sactiver un ancien secret.<\/li>\n\n\n\n<li>Contact Accept Mission if you are unsure which app registration belongs to your environment.<\/li>\n<\/ul>\n\n\n\n<p class=\"wp-block-paragraph\">Pour toute question relative \u00e0 la s\u00e9curit\u00e9, veuillez contacter <strong>security@acceptmission.com<\/strong>.<\/p>","protected":false},"excerpt":{"rendered":"<p>Configure Single Sign-On with Accept Mission This guide explains how an organisation&#8217;s IT administrator can configure Single Sign-On (SSO) for Accept Mission using Microsoft Entra ID, formerly called Azure Active Directory or Azure AD. The setup creates a trust relationship between Accept Mission and your organisation&#8217;s Microsoft identity platform. Users can then sign in to  [&#8230;]<\/p>\n","protected":false},"author":38,"featured_media":0,"comment_status":"closed","ping_status":"closed","template":"","meta":{"_seopress_titles_title":"","_seopress_titles_desc":"","_seopress_robots_index":"","_seopress_robots_follow":"","_seopress_robots_imageindex":"","_seopress_robots_snippet":"","_seopress_robots_primary_cat":"","_seopress_robots_breadcrumbs":"","_seopress_robots_freeze_modified_date":"","_seopress_robots_custom_modified_date":"","_seopress_robots_canonical":"","_seopress_social_fb_title":"","_seopress_social_fb_desc":"","_seopress_social_fb_img":"","_seopress_social_fb_img_attachment_id":0,"_seopress_social_fb_img_width":0,"_seopress_social_fb_img_height":0,"_seopress_social_twitter_title":"","_seopress_social_twitter_desc":"","_seopress_social_twitter_img":"","_seopress_social_twitter_img_attachment_id":0,"_seopress_social_twitter_img_width":0,"_seopress_social_twitter_img_height":0,"_seopress_redirections_value":"","_seopress_redirections_enabled":"","_seopress_redirections_enabled_regex":"","_seopress_redirections_logged_status":"","_seopress_redirections_param":"","_seopress_redirections_type":0,"_seopress_analysis_target_kw":"","_seopress_news_disabled":"","_seopress_video_disabled":"","_seopress_video":[],"_seopress_pro_schemas_manual":[],"_seopress_pro_rich_snippets_disable_all":"","_seopress_pro_rich_snippets_disable":[],"_seopress_pro_schemas":[],"content-type":"","footnotes":"","_members_access_role":[],"_members_access_error":""},"doc_category":[313],"doc_tag":[348,349,347],"glossaries":[],"knowledge_base":[310],"class_list":["post-128193","docs","type-docs","status-publish","hentry","doc_category-security-trust","doc_tag-microsoft-entra-id","doc_tag-security","doc_tag-sso","knowledge_base-trust-center"],"year_month":"2026-10","word_count":1027,"total_views":"1","reactions":{"happy":"0","normal":"0","sad":"0"},"author_info":{"name":"Sofia Limkilde","author_nicename":"sofia-limkildeacceptmission-com","author_url":"#"},"doc_category_info":[{"term_name":"Security &amp; Trust","term_url":"https:\/\/www.acceptmission.com\/fr\/knowledge\/trust-center\/security-trust\/"}],"doc_tag_info":[{"term_name":"Microsoft Entra ID","term_url":"https:\/\/www.acceptmission.com\/fr\/knowledge-tag\/microsoft-entra-id\/"},{"term_name":"Security","term_url":"https:\/\/www.acceptmission.com\/fr\/knowledge-tag\/security\/"},{"term_name":"SSO","term_url":"https:\/\/www.acceptmission.com\/fr\/knowledge-tag\/sso\/"}],"knowledge_base_info":[{"term_name":"Accept Mission Trust Center","term_url":"https:\/\/www.acceptmission.com\/fr\/knowledge\/trust-center\/","term_slug":"trust-center"}],"knowledge_base_slug":["trust-center"],"_links":{"self":[{"href":"https:\/\/www.acceptmission.com\/fr\/wp-json\/wp\/v2\/docs\/128193","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.acceptmission.com\/fr\/wp-json\/wp\/v2\/docs"}],"about":[{"href":"https:\/\/www.acceptmission.com\/fr\/wp-json\/wp\/v2\/types\/docs"}],"author":[{"embeddable":true,"href":"https:\/\/www.acceptmission.com\/fr\/wp-json\/wp\/v2\/users\/38"}],"replies":[{"embeddable":true,"href":"https:\/\/www.acceptmission.com\/fr\/wp-json\/wp\/v2\/comments?post=128193"}],"version-history":[{"count":1,"href":"https:\/\/www.acceptmission.com\/fr\/wp-json\/wp\/v2\/docs\/128193\/revisions"}],"predecessor-version":[{"id":128206,"href":"https:\/\/www.acceptmission.com\/fr\/wp-json\/wp\/v2\/docs\/128193\/revisions\/128206"}],"wp:attachment":[{"href":"https:\/\/www.acceptmission.com\/fr\/wp-json\/wp\/v2\/media?parent=128193"}],"wp:term":[{"taxonomy":"doc_category","embeddable":true,"href":"https:\/\/www.acceptmission.com\/fr\/wp-json\/wp\/v2\/doc_category?post=128193"},{"taxonomy":"doc_tag","embeddable":true,"href":"https:\/\/www.acceptmission.com\/fr\/wp-json\/wp\/v2\/doc_tag?post=128193"},{"taxonomy":"glossaries","embeddable":true,"href":"https:\/\/www.acceptmission.com\/fr\/wp-json\/wp\/v2\/glossaries?post=128193"},{"taxonomy":"knowledge_base","embeddable":true,"href":"https:\/\/www.acceptmission.com\/fr\/wp-json\/wp\/v2\/knowledge_base?post=128193"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}