To enable SSO, your organisation’s Microsoft Entra / Azure Administrator will need to complete a few setup steps. Here’s a simple guide to walk you through the process.
Step 1: Create a New App Registration in Entra
Ask your IT Administrator to log in to the Microsoft Entra admin center.
Go to Applications → App Registrations → New registration
Fill in the following details:
Name: Log my Care SSO (or similar)
Supported account types:
Choose: Accounts in this organizational directory only (Single tenant)
Redirect URI:
Platform: Web
DEV: We will send you this value — it's the same for all customers
Click Register
Step 2: Create a Client Secret
After registering the app, go back to the app registration overview for the Log my Care registration.
Go to Azure Portal → Entra → App Registrations → Log my Care SSO (or similar)
In the left-hand menu, click ”Add a certificate or secret”
Click “New client secret”
Fill in the required information (you can name it anything you like):
Description: Log my Care SSO OIDC Client Secret (or similar)Expires: 730 days (24 months) (or highest value available)
Click Add.
Copy the Client Secret Value right away – you won’t be able to see it again later!
Step 3: Send Us the Required Details
Please send the following 3 pieces of information to your contact at Log my Care:
Client Secret Value
From 'Certificates & Secrets'
Important: This is the value, not the secret ID.
Client ID (also called Application (Client) ID)
Found in in the App Registration Overview page
Tenant ID
Found in Microsoft Entra Admin Center → Identity → Overview
📬 What Happens Next?
Once we receive this information, our team will configure SSO on our side and confirm once everything is set up.
Optional: If you'd like more control over who can log in via SSO, you can configure Conditional Access or restrict login to specific users or groups.
To enable Conditional Access, please complete the steps below.
Step 1: Set “User assignment required” to On
Go to Enterprise Applications → Log my Care → Properties
Step 1: Assign Users or Groups
Go to Enterprise Applications → Log my Care → Users and groups
Step 3: Ongoing Access Management
If a user is removed from an assigned group, they will no longer be able to log in to Log my Care via SSO (once their current session/token expires).
