# Setting up Azure for SSO and provisioning

For IT teams: create the DraftPilot enterprise application in Azure, assign a user group, and turn on automatic provisioning.

(This is for your IT team)

Contact DraftPilot at support@draftpilot.ai, they will add a flag on the system, and also give you a secret provisioning code.

Once you've heard back from DraftPilot - log in to [app.draftpilot.ai](http://app.draftpilot.ai) using SSO / Azure. (This will create an Enterprise Application in your Azure portal).

### Create DraftPilot user group

Next, go to [https://portal.azure.com](https://portal.azure.com)

Click on Enterprise Applications and click on DraftPilot

Click on Users and groups

Check to see if the users is set as a group

Ensure that assignment required is set to true 

### Set up provisioning

In order to set up provisioning (i.e. automatically adding and removing users to DraftPilot) we set up a new Enterprise Application just for provisioning (this is separate from SSO).

Here's how:

-   Create a new Enterprise Application in Azure AD:
    
-   Go to Azure Portal > Azure Active Directory
    
-   Click "Enterprise applications"
    
-   Click "New application"
    
-   Click "Create your own application"
    
-   Name it (e.g., "DraftPilot provisioning”)
    
-   Select "Integrate any other application you don't find in the gallery"
    
-   Assign the DraftPilot user group
    

Next - let's hide it (this app is just for provisioning, and regular users shouldn't see it - it is NOT used for SSO).

-   Enabled for users to sign in: No
    
-   Assignment required: No
    
-   Visible: No
    

### Configure provisioning

In the new Enterprise application, go to "Provisioning"

Click New configuration

Change "Provisioning Mode" to "Automatic"

Under "Admin Credentials", enter:

     Tenant URL: [https://api.draftpilot.ai/v1/scim](https://api.draftpilot.ai/v1/scim)

     Secret Token: \[SECRET TOKEN PROVIDED BY DRAFTPILOT\]

### Test provisioning

Go to Users and groups

Add a user to that user group.

Click on **Provision now**

Within DraftPilot go to [https://app.draftpilot.ai/users](https://app.draftpilot.ai/users) - you should see that new user.