{"id":128193,"date":"2026-10-16T10:16:43","date_gmt":"2026-10-16T08:16:43","guid":{"rendered":"https:\/\/www.acceptmission.com\/knowledge\/configure-single-sign-on-with-accept-mission\/"},"modified":"2026-10-16T10:41:46","modified_gmt":"2026-10-16T08:41:46","password":"","slug":"configure-single-sign-on-with-accept-mission","status":"publish","type":"docs","link":"https:\/\/www.acceptmission.com\/nl\/knowledge\/configure-single-sign-on-with-accept-mission\/","title":{"rendered":"Single Sign-On configureren met Accept Mission"},"content":{"rendered":"<h1 class=\"wp-block-heading\">Single Sign-On configureren met Accept Mission<\/h1>\n\n\n\n<p class=\"wp-block-paragraph\">This guide explains how an organisation&#8217;s IT administrator can configure Single Sign-On (SSO) for Accept Mission using Microsoft Entra ID, formerly called Azure Active Directory or Azure AD.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">The setup creates a trust relationship between Accept Mission and your organisation&#8217;s Microsoft identity platform. Users can then sign in to the Accept Mission environment through the organisation&#8217;s identity provider.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Deze handleiding is bedoeld voor IT-beheerders die app-registraties en machtigingen in Microsoft Entra ID kunnen beheren.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">Wat je nodig hebt van Accept Mission<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">Before you begin, ask your Accept Mission contact for:<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li>Your Accept Mission application subdomain<\/li>\n\n\n\n<li>De exacte omleidings-URI<\/li>\n\n\n\n<li>De exacte URL voor het uitloggen<\/li>\n\n\n\n<li>Eventuele klantspecifieke configuratie-instructies<\/li>\n<\/ul>\n\n\n\n<p class=\"wp-block-paragraph\">The redirect URI and logout URL are specific to your Accept Mission environment. Do not substitute values from another organisation.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">Vereiste Microsoft Entra-machtigingen<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">U hebt toestemming nodig om bedrijfsapplicaties of app-registraties in Microsoft Entra ID te beheren. Afhankelijk van de configuratie van uw organisatie kan een van de volgende rollen vereist zijn:<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li>Applicatiebeheerder<\/li>\n\n\n\n<li>Applicatieontwikkelaar<\/li>\n\n\n\n<li>Beheerder van cloudapplicaties<\/li>\n<\/ul>\n\n\n\n<p class=\"wp-block-paragraph\">Mogelijk hebt u ook toestemming nodig om beheerderstoestemming te verlenen voor gedelegeerde machtigingen in Microsoft Graph.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">Stap 1: Registreer de Accept Mission-applicatie<\/h2>\n\n\n\n<ol class=\"wp-block-list\">\n<li>Meld je aan bij de <a href=\"https:\/\/entra.microsoft.com\">Microsoft Entra-beheercentrum<\/a>.<\/li>\n\n\n\n<li>Als u meer dan \u00e9\u00e9n huurder beheert, selecteer dan de juiste map.<\/li>\n\n\n\n<li>Ga naar <strong>Ga naar ID \u2192 App-registraties \u2192 Nieuwe registratie<\/strong>.<\/li>\n\n\n\n<li>Voer een duidelijke weergavenaam in, zoals <strong>Accept Mission SSO<\/strong>.<\/li>\n\n\n\n<li>Select the sign-in audience required by your organisation and Accept Mission&#8217;s instructions.<\/li>\n\n\n\n<li>Vertrek <strong>Omleidings-URI<\/strong> leeg tijdens deze eerste registratie. Dit wordt in de volgende stap ingevuld.<\/li>\n\n\n\n<li>Selecteer <strong>Registreren<\/strong>.<\/li>\n\n\n\n<li>Kopieer de <strong>Toepassings-ID (client)<\/strong> en <strong>Directory-ID (huurder)<\/strong>. These values are needed by Accept Mission.<\/li>\n<\/ol>\n\n\n\n<p class=\"wp-block-paragraph\">De weergavenaam kan later worden gewijzigd. De applicatie-ID (client-ID) dient als uniek identificatienummer voor de registratie.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">Stap 2: Het webplatform configureren en de omleidings-URI instellen<\/h2>\n\n\n\n<ol class=\"wp-block-list\">\n<li>Open het registratieformulier voor nieuwe apps.<\/li>\n\n\n\n<li>Onder <strong>Beheren<\/strong>, selecteer <strong>Authenticatie<\/strong>.<\/li>\n\n\n\n<li>Selecteer <strong>Een platform toevoegen<\/strong>.<\/li>\n\n\n\n<li>Kies <strong>Web<\/strong>.<\/li>\n\n\n\n<li>Enter the exact redirect URI provided by Accept Mission.<\/li>\n\n\n\n<li>Enter the exact front-channel logout URL provided by Accept Mission.<\/li>\n\n\n\n<li>Sla de configuratie op.<\/li>\n<\/ol>\n\n\n\n<p class=\"wp-block-paragraph\">The redirect URI is where Microsoft Entra ID sends the user after authentication. The logout URL signs the user out of the Accept Mission environment.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Een omleidings-URI heeft doorgaans de volgende indeling:<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><code>https:\/\/&lt;your-subdomain&gt;.acceptmission.com\/auth\/azure_oauth2\/callback<\/code><\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Een uitlog-URL heeft doorgaans de volgende indeling:<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><code>https:\/\/&lt;your-subdomain&gt;.acceptmission.com\/logout<\/code><\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Gebruik de exacte waarden die voor uw omgeving zijn opgegeven.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">Stap 3: Maak een clientgeheim aan<\/h2>\n\n\n\n<ol class=\"wp-block-list\">\n<li>Ga in de app-registratie naar <strong>Certificaten en geheimen<\/strong>.<\/li>\n\n\n\n<li>Onder <strong>Geheime gegevens van klanten<\/strong>, selecteer <strong>Nieuw klantgeheim<\/strong>.<\/li>\n\n\n\n<li>Voer een duidelijke beschrijving in, bijvoorbeeld <strong>Accept Mission SSO<\/strong>.<\/li>\n\n\n\n<li>Select an expiry period. Microsoft Entra client secrets can be valid for up to 24 months. Accept Mission recommends selecting <strong>730 dagen (24 maanden)<\/strong> tenzij uw organisatie een kortere termijn vereist.<\/li>\n\n\n\n<li>Selecteer <strong>Voeg  toe<\/strong>.<\/li>\n\n\n\n<li>Kopieer onmiddellijk de geheime code <strong>Waarde<\/strong>.<\/li>\n<\/ol>\n\n\n\n<p class=\"wp-block-paragraph\">Important: Accept Mission needs the client secret <strong>Waarde<\/strong>, niet de <strong>Geheime ID<\/strong>. De volledige waarde wordt alleen weergegeven wanneer het geheim wordt aangemaakt.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Vermeld het geheim nooit in een gewone e-mail, een screenshot, een ticket of dit document. Gebruik de goedgekeurde beveiligde overdrachtsmethode.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">Stap 4: Tokenclaims configureren<\/h2>\n\n\n\n<ol class=\"wp-block-list\">\n<li>Onder <strong>Beheren<\/strong>, open <strong>Tokenconfiguratie<\/strong>.<\/li>\n\n\n\n<li>Voeg de volgende ID-tokenclaims toe:<\/li>\n<\/ol>\n\n\n\n<figure class=\"wp-block-table\"><table>\n<thead>\n<tr>\n<th>Bewering<\/th>\n<th>Type token<\/th>\n<th>Vereist<\/th>\n<\/tr>\n<\/thead>\n<tbody>\n<tr>\n<td>e-mail<\/td>\n<td>ID<\/td>\n<td>Ja<\/td>\n<\/tr>\n<tr>\n<td>achternaam<\/td>\n<td>ID<\/td>\n<td>Ja<\/td>\n<\/tr>\n<tr>\n<td>voornaam<\/td>\n<td>ID<\/td>\n<td>Ja<\/td>\n<\/tr>\n<tr>\n<td>profielfoto<\/td>\n<td>ID<\/td>\n<td>Geen<\/td>\n<\/tr>\n<\/tbody>\n<\/table><\/figure>\n\n\n\n<p class=\"wp-block-paragraph\">The optional profile_picture claim can be used to create the user&#8217;s profile picture in Accept Mission. It may require additional internal permissions.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">Stap 5: Microsoft Graph-machtigingen configureren<\/h2>\n\n\n\n<ol class=\"wp-block-list\">\n<li>Onder <strong>Beheren<\/strong>, open <strong>API-machtigingen<\/strong>.<\/li>\n\n\n\n<li>Selecteer <strong>Een machtiging toevoegen<\/strong>.<\/li>\n\n\n\n<li>Selecteer <strong>Microsoft Graph<\/strong>.<\/li>\n\n\n\n<li>Selecteer <strong>Gedelegeerde machtigingen<\/strong>.<\/li>\n\n\n\n<li>Voeg deze machtigingen toe:<\/li>\n<\/ol>\n\n\n\n<ul class=\"wp-block-list\">\n<li>e-mail<\/li>\n\n\n\n<li>profiel<\/li>\n\n\n\n<li>User.Read<\/li>\n<\/ul>\n\n\n\n<ol class=\"wp-block-list\">\n<li>Selecteer <strong>Rechten toevoegen<\/strong>.<\/li>\n\n\n\n<li>Selecteer <strong>Grant admin consent<\/strong> voor uw organisatie.<\/li>\n\n\n\n<li>Controleer of de vereiste machtigingen als \u2018goedgekeurd\u2019 worden weergegeven.<\/li>\n<\/ol>\n\n\n\n<p class=\"wp-block-paragraph\">Granting administrator consent prevents each user from being asked to consent individually during sign-in. Without the required consent, a user&#8217;s account may not be created correctly in Accept Mission.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">Stap 6: Verstuur de configuratiegegevens op een veilige manier<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">After the configuration is complete, send the following to your Accept Mission contact using an approved secure transfer method:<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li>Bevestiging dat de configuratie is voltooid<\/li>\n\n\n\n<li>Toepassings-ID (client)<\/li>\n\n\n\n<li>Directory-ID (huurder)<\/li>\n\n\n\n<li>Geheim van de klant <strong>Waarde<\/strong><\/li>\n<\/ul>\n\n\n\n<p class=\"wp-block-paragraph\">Do not send the client secret through ordinary email. Accept Mission will use these details to complete the connection and test the sign-in flow.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">Stap 7: Test de SSO-verbinding<\/h2>\n\n\n\n<ol class=\"wp-block-list\">\n<li>Confirm that Accept Mission has completed the configuration.<\/li>\n\n\n\n<li>Open the Accept Mission environment using the customer URL.<\/li>\n\n\n\n<li>Meld je aan met een bestaand organisatieaccount.<\/li>\n\n\n\n<li>Controleer of je via Microsoft Entra ID wordt doorgestuurd.<\/li>\n\n\n\n<li>Confirm that you reach the correct Accept Mission environment.<\/li>\n\n\n\n<li>Controleer of het gebruikersprofiel correct is aangemaakt of herkend.<\/li>\n<\/ol>\n\n\n\n<p class=\"wp-block-paragraph\">If the sign-in fails, confirm that the redirect URI, logout URL, tenant, claims, permissions, consent, and client secret Value are correct. Contact Accept Mission if the issue continues.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">Een verlopen clientgeheim vernieuwen<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">This renewal process applies to the existing Accept Mission customer app registration. It does not migrate your organisation to a new enterprise SSO connection.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">De geldigheidsduur van het clientgeheim kan niet worden verlengd. Wanneer het huidige geheim bijna verloopt:<\/p>\n\n\n\n<ol class=\"wp-block-list\">\n<li>Open the existing Accept Mission app registration in Microsoft Entra ID.<\/li>\n\n\n\n<li>Ga naar <strong>Certificaten en geheimen \u2192 Clientgeheimen \u2192 Nieuw clientgeheim<\/strong>.<\/li>\n\n\n\n<li>Maak een vervangend geheim aan.<\/li>\n\n\n\n<li>Kopieer de gegevens van het nieuwe geheim <strong>Waarde<\/strong>, niet de geheime ID.<\/li>\n\n\n\n<li>Share the Value securely with your Accept Mission contact together with your organisation name, customer URL, Application (client) ID, and new expiry date.<\/li>\n\n\n\n<li>Ask Accept Mission to update the connection.<\/li>\n\n\n\n<li>Probeer in te loggen met een bestaand account.<\/li>\n\n\n\n<li>Schrap het oude geheim pas nadat de vervanging is getest en het beleid van uw organisatie dit toestaat.<\/li>\n\n\n\n<li>Noteer de nieuwe vervaldatum en plan de volgende verlenging alvast in.<\/li>\n<\/ol>\n\n\n\n<p class=\"wp-block-paragraph\">Do not delete the app registration. Keep the client ID, tenant ID, redirect URI, logout URL, claims, and permissions unchanged unless Accept Mission instructs you otherwise.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">Belangrijke veiligheidsrichtlijnen<\/h2>\n\n\n\n<ul class=\"wp-block-list\">\n<li>Gebruik de bestaande registratie van de klantapp bij het vernieuwen van een geheim.<\/li>\n\n\n\n<li>Vermeld een clientgeheim nooit in schermafbeeldingen of gewone e-mails.<\/li>\n\n\n\n<li>Deel inloggegevens uitsluitend via een goedgekeurde, beveiligde overdrachtsmethode.<\/li>\n\n\n\n<li>Do not share the Secret ID when Accept Mission needs the secret Value.<\/li>\n\n\n\n<li>Controleer de verbinding voordat je een oud geheim buiten gebruik stelt.<\/li>\n\n\n\n<li>Contact Accept Mission if you are unsure which app registration belongs to your environment.<\/li>\n<\/ul>\n\n\n\n<p class=\"wp-block-paragraph\">Neem voor vragen over beveiliging contact op met <strong>security@acceptmission.com<\/strong>.<\/p>","protected":false},"excerpt":{"rendered":"<p>Configure Single Sign-On with Accept Mission This guide explains how an organisation&#8217;s IT administrator can configure Single Sign-On (SSO) for Accept Mission using Microsoft Entra ID, formerly called Azure Active Directory or Azure AD. The setup creates a trust relationship between Accept Mission and your organisation&#8217;s Microsoft identity platform. Users can then sign in to  [&#8230;]<\/p>\n","protected":false},"author":38,"featured_media":0,"comment_status":"closed","ping_status":"closed","template":"","meta":{"_seopress_titles_title":"","_seopress_titles_desc":"","_seopress_robots_index":"","_seopress_robots_follow":"","_seopress_robots_imageindex":"","_seopress_robots_snippet":"","_seopress_robots_primary_cat":"","_seopress_robots_breadcrumbs":"","_seopress_robots_freeze_modified_date":"","_seopress_robots_custom_modified_date":"","_seopress_robots_canonical":"","_seopress_social_fb_title":"","_seopress_social_fb_desc":"","_seopress_social_fb_img":"","_seopress_social_fb_img_attachment_id":0,"_seopress_social_fb_img_width":0,"_seopress_social_fb_img_height":0,"_seopress_social_twitter_title":"","_seopress_social_twitter_desc":"","_seopress_social_twitter_img":"","_seopress_social_twitter_img_attachment_id":0,"_seopress_social_twitter_img_width":0,"_seopress_social_twitter_img_height":0,"_seopress_redirections_value":"","_seopress_redirections_enabled":"","_seopress_redirections_enabled_regex":"","_seopress_redirections_logged_status":"","_seopress_redirections_param":"","_seopress_redirections_type":0,"_seopress_analysis_target_kw":"","_seopress_news_disabled":"","_seopress_video_disabled":"","_seopress_video":[],"_seopress_pro_schemas_manual":[],"_seopress_pro_rich_snippets_disable_all":"","_seopress_pro_rich_snippets_disable":[],"_seopress_pro_schemas":[],"content-type":"","footnotes":"","_members_access_role":[],"_members_access_error":""},"doc_category":[313],"doc_tag":[348,349,347],"glossaries":[],"knowledge_base":[310],"class_list":["post-128193","docs","type-docs","status-publish","hentry","doc_category-security-trust","doc_tag-microsoft-entra-id","doc_tag-security","doc_tag-sso","knowledge_base-trust-center"],"year_month":"2026-10","word_count":1027,"total_views":"1","reactions":{"happy":"0","normal":"0","sad":"0"},"author_info":{"name":"Sofia Limkilde","author_nicename":"sofia-limkildeacceptmission-com","author_url":"#"},"doc_category_info":[{"term_name":"Security &amp; Trust","term_url":"https:\/\/www.acceptmission.com\/nl\/knowledge\/trust-center\/security-trust\/"}],"doc_tag_info":[{"term_name":"Microsoft Entra ID","term_url":"https:\/\/www.acceptmission.com\/nl\/knowledge-tag\/microsoft-entra-id\/"},{"term_name":"Security","term_url":"https:\/\/www.acceptmission.com\/nl\/knowledge-tag\/security\/"},{"term_name":"SSO","term_url":"https:\/\/www.acceptmission.com\/nl\/knowledge-tag\/sso\/"}],"knowledge_base_info":[{"term_name":"Accept Mission Trust Center","term_url":"https:\/\/www.acceptmission.com\/nl\/knowledge\/trust-center\/","term_slug":"trust-center"}],"knowledge_base_slug":["trust-center"],"_links":{"self":[{"href":"https:\/\/www.acceptmission.com\/nl\/wp-json\/wp\/v2\/docs\/128193","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.acceptmission.com\/nl\/wp-json\/wp\/v2\/docs"}],"about":[{"href":"https:\/\/www.acceptmission.com\/nl\/wp-json\/wp\/v2\/types\/docs"}],"author":[{"embeddable":true,"href":"https:\/\/www.acceptmission.com\/nl\/wp-json\/wp\/v2\/users\/38"}],"replies":[{"embeddable":true,"href":"https:\/\/www.acceptmission.com\/nl\/wp-json\/wp\/v2\/comments?post=128193"}],"version-history":[{"count":1,"href":"https:\/\/www.acceptmission.com\/nl\/wp-json\/wp\/v2\/docs\/128193\/revisions"}],"predecessor-version":[{"id":128206,"href":"https:\/\/www.acceptmission.com\/nl\/wp-json\/wp\/v2\/docs\/128193\/revisions\/128206"}],"wp:attachment":[{"href":"https:\/\/www.acceptmission.com\/nl\/wp-json\/wp\/v2\/media?parent=128193"}],"wp:term":[{"taxonomy":"doc_category","embeddable":true,"href":"https:\/\/www.acceptmission.com\/nl\/wp-json\/wp\/v2\/doc_category?post=128193"},{"taxonomy":"doc_tag","embeddable":true,"href":"https:\/\/www.acceptmission.com\/nl\/wp-json\/wp\/v2\/doc_tag?post=128193"},{"taxonomy":"glossaries","embeddable":true,"href":"https:\/\/www.acceptmission.com\/nl\/wp-json\/wp\/v2\/glossaries?post=128193"},{"taxonomy":"knowledge_base","embeddable":true,"href":"https:\/\/www.acceptmission.com\/nl\/wp-json\/wp\/v2\/knowledge_base?post=128193"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}