{"id":128193,"date":"2026-10-16T10:16:43","date_gmt":"2026-10-16T08:16:43","guid":{"rendered":"https:\/\/www.acceptmission.com\/knowledge\/configure-single-sign-on-with-accept-mission\/"},"modified":"2026-10-16T10:41:46","modified_gmt":"2026-10-16T08:41:46","password":"","slug":"configure-single-sign-on-with-accept-mission","status":"publish","type":"docs","link":"https:\/\/www.acceptmission.com\/pt\/knowledge\/configure-single-sign-on-with-accept-mission\/","title":{"rendered":"Configurar o in\u00edcio de sess\u00e3o \u00fanico com o Accept Mission"},"content":{"rendered":"<h1 class=\"wp-block-heading\">Configurar o in\u00edcio de sess\u00e3o \u00fanico com o Accept Mission<\/h1>\n\n\n\n<p class=\"wp-block-paragraph\">This guide explains how an organisation&#8217;s IT administrator can configure Single Sign-On (SSO) for Accept Mission using Microsoft Entra ID, formerly called Azure Active Directory or Azure AD.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">The setup creates a trust relationship between Accept Mission and your organisation&#8217;s Microsoft identity platform. Users can then sign in to the Accept Mission environment through the organisation&#8217;s identity provider.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Este guia destina-se a um administrador de TI capaz de gerir registos de aplica\u00e7\u00f5es e permiss\u00f5es no Microsoft Entra ID.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">O que precisa da Accept Mission<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">Before you begin, ask your Accept Mission contact for:<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li>Your Accept Mission application subdomain<\/li>\n\n\n\n<li>O URI de redirecionamento exato<\/li>\n\n\n\n<li>O URL exato para sair da sess\u00e3o<\/li>\n\n\n\n<li>Quaisquer instru\u00e7\u00f5es de configura\u00e7\u00e3o espec\u00edficas do cliente<\/li>\n<\/ul>\n\n\n\n<p class=\"wp-block-paragraph\">The redirect URI and logout URL are specific to your Accept Mission environment. Do not substitute values from another organisation.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">Permiss\u00f5es necess\u00e1rias do Microsoft Entra<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">\u00c9 necess\u00e1ria autoriza\u00e7\u00e3o para gerir aplica\u00e7\u00f5es empresariais ou registos de aplica\u00e7\u00f5es no Microsoft Entra ID. Dependendo da configura\u00e7\u00e3o da sua organiza\u00e7\u00e3o, poder\u00e1 ser necess\u00e1ria uma das seguintes fun\u00e7\u00f5es:<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li>Administrador de Aplica\u00e7\u00f5es<\/li>\n\n\n\n<li>Desenvolvedor de Aplica\u00e7\u00f5es<\/li>\n\n\n\n<li>Administrador de Aplica\u00e7\u00f5es na Nuvem<\/li>\n<\/ul>\n\n\n\n<p class=\"wp-block-paragraph\">Tamb\u00e9m poder\u00e1 ser necess\u00e1rio obter autoriza\u00e7\u00e3o para conceder o consentimento do administrador relativamente \u00e0s permiss\u00f5es delegadas do Microsoft Graph.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">Passo 1: Registar a aplica\u00e7\u00e3o Accept Mission<\/h2>\n\n\n\n<ol class=\"wp-block-list\">\n<li>Inicie sess\u00e3o no <a href=\"https:\/\/entra.microsoft.com\">Centro de administra\u00e7\u00e3o do Microsoft Entra<\/a>.<\/li>\n\n\n\n<li>Se gerir mais do que um inquilino, selecione o diret\u00f3rio correto.<\/li>\n\n\n\n<li>Ir para <strong>Entra ID \u2192 Registos de aplica\u00e7\u00f5es \u2192 Novo registo<\/strong>.<\/li>\n\n\n\n<li>Introduza um nome de exibi\u00e7\u00e3o claro, como, por exemplo, <strong>Accept Mission SSO<\/strong>.<\/li>\n\n\n\n<li>Select the sign-in audience required by your organisation and Accept Mission&#8217;s instructions.<\/li>\n\n\n\n<li>Sa\u00edda <strong>URI de redirecionamento<\/strong> vazio durante este registo inicial. \u00c9 adicionado no passo seguinte.<\/li>\n\n\n\n<li>Selecionar <strong>Registar-se<\/strong>.<\/li>\n\n\n\n<li>Copie o <strong>ID da aplica\u00e7\u00e3o (cliente)<\/strong> e <strong>ID do diret\u00f3rio (inquilino)<\/strong>. These values are needed by Accept Mission.<\/li>\n<\/ol>\n\n\n\n<p class=\"wp-block-paragraph\">O nome de exibi\u00e7\u00e3o pode ser alterado posteriormente. O ID da aplica\u00e7\u00e3o (cliente) identifica de forma \u00fanica o registo.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">Passo 2: Configurar a plataforma web e o URI de redirecionamento<\/h2>\n\n\n\n<ol class=\"wp-block-list\">\n<li>Abrir o registo de uma nova aplica\u00e7\u00e3o.<\/li>\n\n\n\n<li>Abaixo de <strong>Gerir<\/strong>, selecione <strong>Autentica\u00e7\u00e3o<\/strong>.<\/li>\n\n\n\n<li>Selecionar <strong>Adicionar uma plataforma<\/strong>.<\/li>\n\n\n\n<li>Escolher <strong>Web<\/strong>.<\/li>\n\n\n\n<li>Enter the exact redirect URI provided by Accept Mission.<\/li>\n\n\n\n<li>Enter the exact front-channel logout URL provided by Accept Mission.<\/li>\n\n\n\n<li>Guardar a configura\u00e7\u00e3o.<\/li>\n<\/ol>\n\n\n\n<p class=\"wp-block-paragraph\">The redirect URI is where Microsoft Entra ID sends the user after authentication. The logout URL signs the user out of the Accept Mission environment.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Um URI de redirecionamento segue normalmente este formato:<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><code>https:\/\/&lt;your-subdomain&gt;.acceptmission.com\/auth\/azure_oauth2\/callback<\/code><\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Um URL de sa\u00edda do sistema segue normalmente este formato:<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><code>https:\/\/&lt;your-subdomain&gt;.acceptmission.com\/logout<\/code><\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Utilize os valores exatos fornecidos para o seu ambiente.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">Passo 3: Criar um segredo de cliente<\/h2>\n\n\n\n<ol class=\"wp-block-list\">\n<li>No registo da aplica\u00e7\u00e3o, aceda a <strong>Certificados e segredos<\/strong>.<\/li>\n\n\n\n<li>Abaixo de <strong>Segredos do cliente<\/strong>, selecione <strong>Novo segredo de cliente<\/strong>.<\/li>\n\n\n\n<li>Introduza uma descri\u00e7\u00e3o clara, como, por exemplo, <strong>Accept Mission SSO<\/strong>.<\/li>\n\n\n\n<li>Select an expiry period. Microsoft Entra client secrets can be valid for up to 24 months. Accept Mission recommends selecting <strong>730 dias (24 meses)<\/strong> a menos que a sua organiza\u00e7\u00e3o exija um per\u00edodo mais curto.<\/li>\n\n\n\n<li>Selecionar <strong>Adicionar<\/strong>.<\/li>\n\n\n\n<li>Copie imediatamente o segredo <strong>Valor<\/strong>.<\/li>\n<\/ol>\n\n\n\n<p class=\"wp-block-paragraph\">Important: Accept Mission needs the client secret <strong>Valor<\/strong>, e n\u00e3o o <strong>Identifica\u00e7\u00e3o secreta<\/strong>. O valor completo s\u00f3 \u00e9 apresentado quando o segredo \u00e9 criado.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Nunca coloque a senha num e-mail comum, numa captura de ecr\u00e3, num ticket ou neste documento. Utilize o seu m\u00e9todo de transfer\u00eancia segura aprovado.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">Passo 4: Configurar as reivindica\u00e7\u00f5es do token<\/h2>\n\n\n\n<ol class=\"wp-block-list\">\n<li>Abaixo de <strong>Gerir<\/strong>, abrir <strong>Configura\u00e7\u00e3o do token<\/strong>.<\/li>\n\n\n\n<li>Adicione as seguintes reivindica\u00e7\u00f5es de token de identifica\u00e7\u00e3o:<\/li>\n<\/ol>\n\n\n\n<figure class=\"wp-block-table\"><table>\n<thead>\n<tr>\n<th>Reivindica\u00e7\u00e3o<\/th>\n<th>Tipo de token<\/th>\n<th>Necess\u00e1rio<\/th>\n<\/tr>\n<\/thead>\n<tbody>\n<tr>\n<td>e-mail<\/td>\n<td>ID<\/td>\n<td>Sim<\/td>\n<\/tr>\n<tr>\n<td>apelido<\/td>\n<td>ID<\/td>\n<td>Sim<\/td>\n<\/tr>\n<tr>\n<td>nome pr\u00f3prio<\/td>\n<td>ID<\/td>\n<td>Sim<\/td>\n<\/tr>\n<tr>\n<td>foto de perfil<\/td>\n<td>ID<\/td>\n<td>N\u00e3o<\/td>\n<\/tr>\n<\/tbody>\n<\/table><\/figure>\n\n\n\n<p class=\"wp-block-paragraph\">The optional profile_picture claim can be used to create the user&#8217;s profile picture in Accept Mission. It may require additional internal permissions.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">Passo 5: Configurar as permiss\u00f5es do Microsoft Graph<\/h2>\n\n\n\n<ol class=\"wp-block-list\">\n<li>Abaixo de <strong>Gerir<\/strong>, abrir <strong>Permiss\u00f5es da API<\/strong>.<\/li>\n\n\n\n<li>Selecionar <strong>Adicionar uma autoriza\u00e7\u00e3o<\/strong>.<\/li>\n\n\n\n<li>Selecionar <strong>Microsoft Graph<\/strong>.<\/li>\n\n\n\n<li>Selecionar <strong>Permiss\u00f5es delegadas<\/strong>.<\/li>\n\n\n\n<li>Adicione estas permiss\u00f5es:<\/li>\n<\/ol>\n\n\n\n<ul class=\"wp-block-list\">\n<li>e-mail<\/li>\n\n\n\n<li>perfil<\/li>\n\n\n\n<li>User.Read<\/li>\n<\/ul>\n\n\n\n<ol class=\"wp-block-list\">\n<li>Selecionar <strong>Adicionar permiss\u00f5es<\/strong>.<\/li>\n\n\n\n<li>Selecionar <strong>Grant admin consent<\/strong> para a vossa organiza\u00e7\u00e3o.<\/li>\n\n\n\n<li>Confirme se as autoriza\u00e7\u00f5es necess\u00e1rias aparecem como concedidas.<\/li>\n<\/ol>\n\n\n\n<p class=\"wp-block-paragraph\">Granting administrator consent prevents each user from being asked to consent individually during sign-in. Without the required consent, a user&#8217;s account may not be created correctly in Accept Mission.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">Passo 6: Enviar os detalhes da configura\u00e7\u00e3o de forma segura<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">After the configuration is complete, send the following to your Accept Mission contact using an approved secure transfer method:<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li>Confirma\u00e7\u00e3o de que a configura\u00e7\u00e3o est\u00e1 conclu\u00edda<\/li>\n\n\n\n<li>ID da aplica\u00e7\u00e3o (cliente)<\/li>\n\n\n\n<li>ID do diret\u00f3rio (inquilino)<\/li>\n\n\n\n<li>Segredo do cliente <strong>Valor<\/strong><\/li>\n<\/ul>\n\n\n\n<p class=\"wp-block-paragraph\">Do not send the client secret through ordinary email. Accept Mission will use these details to complete the connection and test the sign-in flow.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">Passo 7: Testar a liga\u00e7\u00e3o SSO<\/h2>\n\n\n\n<ol class=\"wp-block-list\">\n<li>Confirm that Accept Mission has completed the configuration.<\/li>\n\n\n\n<li>Open the Accept Mission environment using the customer URL.<\/li>\n\n\n\n<li>Inicie sess\u00e3o com uma conta de organiza\u00e7\u00e3o j\u00e1 existente.<\/li>\n\n\n\n<li>Confirme se foi redirecionado atrav\u00e9s do Microsoft Entra ID.<\/li>\n\n\n\n<li>Confirm that you reach the correct Accept Mission environment.<\/li>\n\n\n\n<li>Confirme se o perfil do utilizador foi criado ou reconhecido corretamente.<\/li>\n<\/ol>\n\n\n\n<p class=\"wp-block-paragraph\">If the sign-in fails, confirm that the redirect URI, logout URL, tenant, claims, permissions, consent, and client secret Value are correct. Contact Accept Mission if the issue continues.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">Renovar um segredo de cliente expirado<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">This renewal process applies to the existing Accept Mission customer app registration. It does not migrate your organisation to a new enterprise SSO connection.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">O prazo de validade do segredo do cliente n\u00e3o pode ser prolongado. Quando o segredo existente estiver prestes a expirar:<\/p>\n\n\n\n<ol class=\"wp-block-list\">\n<li>Open the existing Accept Mission app registration in Microsoft Entra ID.<\/li>\n\n\n\n<li>Ir para <strong>Certificados e segredos \u2192 Segredos de cliente \u2192 Novo segredo de cliente<\/strong>.<\/li>\n\n\n\n<li>Crie um segredo de substitui\u00e7\u00e3o.<\/li>\n\n\n\n<li>Copie o novo segredo <strong>Valor<\/strong>, e n\u00e3o a Identidade Secreta.<\/li>\n\n\n\n<li>Share the Value securely with your Accept Mission contact together with your organisation name, customer URL, Application (client) ID, and new expiry date.<\/li>\n\n\n\n<li>Ask Accept Mission to update the connection.<\/li>\n\n\n\n<li>Experimente iniciar sess\u00e3o com uma conta j\u00e1 existente.<\/li>\n\n\n\n<li>S\u00f3 deve retirar o antigo segredo depois de o substituto ter sido testado e de a pol\u00edtica da sua organiza\u00e7\u00e3o o permitir.<\/li>\n\n\n\n<li>Registe a nova data de validade e programe a pr\u00f3xima renova\u00e7\u00e3o com anteced\u00eancia.<\/li>\n<\/ol>\n\n\n\n<p class=\"wp-block-paragraph\">Do not delete the app registration. Keep the client ID, tenant ID, redirect URI, logout URL, claims, and permissions unchanged unless Accept Mission instructs you otherwise.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">Orienta\u00e7\u00f5es importantes em mat\u00e9ria de seguran\u00e7a<\/h2>\n\n\n\n<ul class=\"wp-block-list\">\n<li>Utilize o registo existente da aplica\u00e7\u00e3o do cliente ao renovar um segredo.<\/li>\n\n\n\n<li>Nunca inclua um segredo de cliente em capturas de ecr\u00e3 ou em e-mails normais.<\/li>\n\n\n\n<li>Partilhe as credenciais apenas atrav\u00e9s de um m\u00e9todo de transfer\u00eancia seguro e aprovado.<\/li>\n\n\n\n<li>Do not share the Secret ID when Accept Mission needs the secret Value.<\/li>\n\n\n\n<li>Teste a liga\u00e7\u00e3o antes de retirar um segredo antigo.<\/li>\n\n\n\n<li>Contact Accept Mission if you are unsure which app registration belongs to your environment.<\/li>\n<\/ul>\n\n\n\n<p class=\"wp-block-paragraph\">Para quest\u00f5es de seguran\u00e7a, contacte <strong>security@acceptmission.com<\/strong>.<\/p>","protected":false},"excerpt":{"rendered":"<p>Configure Single Sign-On with Accept Mission This guide explains how an organisation&#8217;s IT administrator can configure Single Sign-On (SSO) for Accept Mission using Microsoft Entra ID, formerly called Azure Active Directory or Azure AD. The setup creates a trust relationship between Accept Mission and your organisation&#8217;s Microsoft identity platform. Users can then sign in to  [&#8230;]<\/p>\n","protected":false},"author":38,"featured_media":0,"comment_status":"closed","ping_status":"closed","template":"","meta":{"_seopress_titles_title":"","_seopress_titles_desc":"","_seopress_robots_index":"","_seopress_robots_follow":"","_seopress_robots_imageindex":"","_seopress_robots_snippet":"","_seopress_robots_primary_cat":"","_seopress_robots_breadcrumbs":"","_seopress_robots_freeze_modified_date":"","_seopress_robots_custom_modified_date":"","_seopress_robots_canonical":"","_seopress_social_fb_title":"","_seopress_social_fb_desc":"","_seopress_social_fb_img":"","_seopress_social_fb_img_attachment_id":0,"_seopress_social_fb_img_width":0,"_seopress_social_fb_img_height":0,"_seopress_social_twitter_title":"","_seopress_social_twitter_desc":"","_seopress_social_twitter_img":"","_seopress_social_twitter_img_attachment_id":0,"_seopress_social_twitter_img_width":0,"_seopress_social_twitter_img_height":0,"_seopress_redirections_value":"","_seopress_redirections_enabled":"","_seopress_redirections_enabled_regex":"","_seopress_redirections_logged_status":"","_seopress_redirections_param":"","_seopress_redirections_type":0,"_seopress_analysis_target_kw":"","_seopress_news_disabled":"","_seopress_video_disabled":"","_seopress_video":[],"_seopress_pro_schemas_manual":[],"_seopress_pro_rich_snippets_disable_all":"","_seopress_pro_rich_snippets_disable":[],"_seopress_pro_schemas":[],"content-type":"","footnotes":"","_members_access_role":[],"_members_access_error":""},"doc_category":[313],"doc_tag":[348,349,347],"glossaries":[],"knowledge_base":[310],"class_list":["post-128193","docs","type-docs","status-publish","hentry","doc_category-security-trust","doc_tag-microsoft-entra-id","doc_tag-security","doc_tag-sso","knowledge_base-trust-center"],"year_month":"2026-10","word_count":1027,"total_views":"1","reactions":{"happy":"0","normal":"0","sad":"0"},"author_info":{"name":"Sofia Limkilde","author_nicename":"sofia-limkildeacceptmission-com","author_url":"#"},"doc_category_info":[{"term_name":"Security &amp; Trust","term_url":"https:\/\/www.acceptmission.com\/pt\/knowledge\/trust-center\/security-trust\/"}],"doc_tag_info":[{"term_name":"Microsoft Entra ID","term_url":"https:\/\/www.acceptmission.com\/pt\/knowledge-tag\/microsoft-entra-id\/"},{"term_name":"Security","term_url":"https:\/\/www.acceptmission.com\/pt\/knowledge-tag\/security\/"},{"term_name":"SSO","term_url":"https:\/\/www.acceptmission.com\/pt\/knowledge-tag\/sso\/"}],"knowledge_base_info":[{"term_name":"Accept Mission Trust Center","term_url":"https:\/\/www.acceptmission.com\/pt\/knowledge\/trust-center\/","term_slug":"trust-center"}],"knowledge_base_slug":["trust-center"],"_links":{"self":[{"href":"https:\/\/www.acceptmission.com\/pt\/wp-json\/wp\/v2\/docs\/128193","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.acceptmission.com\/pt\/wp-json\/wp\/v2\/docs"}],"about":[{"href":"https:\/\/www.acceptmission.com\/pt\/wp-json\/wp\/v2\/types\/docs"}],"author":[{"embeddable":true,"href":"https:\/\/www.acceptmission.com\/pt\/wp-json\/wp\/v2\/users\/38"}],"replies":[{"embeddable":true,"href":"https:\/\/www.acceptmission.com\/pt\/wp-json\/wp\/v2\/comments?post=128193"}],"version-history":[{"count":1,"href":"https:\/\/www.acceptmission.com\/pt\/wp-json\/wp\/v2\/docs\/128193\/revisions"}],"predecessor-version":[{"id":128206,"href":"https:\/\/www.acceptmission.com\/pt\/wp-json\/wp\/v2\/docs\/128193\/revisions\/128206"}],"wp:attachment":[{"href":"https:\/\/www.acceptmission.com\/pt\/wp-json\/wp\/v2\/media?parent=128193"}],"wp:term":[{"taxonomy":"doc_category","embeddable":true,"href":"https:\/\/www.acceptmission.com\/pt\/wp-json\/wp\/v2\/doc_category?post=128193"},{"taxonomy":"doc_tag","embeddable":true,"href":"https:\/\/www.acceptmission.com\/pt\/wp-json\/wp\/v2\/doc_tag?post=128193"},{"taxonomy":"glossaries","embeddable":true,"href":"https:\/\/www.acceptmission.com\/pt\/wp-json\/wp\/v2\/glossaries?post=128193"},{"taxonomy":"knowledge_base","embeddable":true,"href":"https:\/\/www.acceptmission.com\/pt\/wp-json\/wp\/v2\/knowledge_base?post=128193"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}