How to Set Up Microsoft SSO for ContactMonkey

ContactMonkey uses Microsoft's OAuth2 authentication to enable single sign-on (SSO) for your organization. This setup requires an Azure administrator and takes approximately 10 minutes to complete.

Click here if you're interested in setting up SAML SSO.

Before You Begin

You need:

• Azure Administrator access to your organization's Microsoft Entra Admin Center
• Your ContactMonkey data region

Important: If you don't know your data region, contact your Customer Success Manager or ContactMonkey Technical Support before proceeding. Your data region determines which authentication endpoint you'll use.

Setup Instructions

Step 1: Locate Your Azure Tenant ID

1. Sign in to the Microsoft Entra Admin Center at https://entra.microsoft.com/
2. Navigate to Identity → Overview
3. Copy your Tenant ID (you'll need this in the next step)

Step 2: Grant Admin Consent

Choose the consent URL that matches your ContactMonkey data region. Replace [TenantID] with your actual Tenant ID from Step 1.

For US:

https://login.microsoftonline.com/[TenantID]/adminconsent?client_id=3575e4Af-6e0e-4052-9a30-c7c7a4731eb1

For EU, CA, and AU:

https://login.microsoftonline.com/[TenantID]/adminconsent?client_id=7d50b461-a18b-499d-903b-e91adfd9a435

1. Paste your region's URL into your browser (with your Tenant ID inserted)
2. Review the permissions that ContactMonkey requests
3. Click Accept to grant consent

You'll be redirected to a confirmation page. The ContactMonkey Enterprise application is now available in your tenant.

Step 3: Manage User Access (Optional)

You can control which users can authenticate to ContactMonkey:

1. In the Entra Admin Center, go to Enterprise Applications
2. Search for and select ContactMonkey
3. Click Properties in the left sidebar
4. Under Assignment required?, select Yes
5. Click Save

When an assignment is required, only users or groups you explicitly assign can access ContactMonkey.

To assign users or groups:

1. In the ContactMonkey application page, click Users and groups
2. Click Add user/group
3. Select the users or mail-enabled security groups who need access
4. Click Assign

What Happens Next

Once you complete this setup:

• Users in your organization can sign in to ContactMonkey using their Microsoft 365 credentials
• No additional passwords are required
• Users authenticate through your organization's security policies

If you restricted access to assigned users, anyone not on the list will see an access denied message when they try to sign in.