Step 1: Create the Application in Entra ID/Azure
Log in to the Azure Portal with an administrator account
Go to "Microsoft Entra ID"
In the left-hand menu, select "Enterprise Applications"
Click "+ New application"
If TAC is available as a pre-configured app, search for it and select it
If TAC is not listed, choose "Create your own application" → "Integrate any other application not in the gallery"
Enter a name for the application (e.g. "TAC SSO") and click "Create"
Step 2: Configure Single Sign-On (SSO) with OpenID Connect (OIDC)
Go to "Single Sign-On" and select "OIDC"
Configure the following key parameters:
Client ID and Client Secret (automatically generated)
Redirect URI:
https://app.touchandcontact.comIssuer URL (optional):
https://login.microsoftonline.com/{Tenant-ID}/v2.0
Define the required scopes:
openidprofileoffline_accessemail
Step 3: Enable User Access
Go to "Users and groups" in the enterprise application screen
Click "Add user/group"
Select the users or groups authorised to access TAC
Save the changes
Step 4: Manually Approve the App (Grant Access Without Approval Request)
Go to "API Permissions" in your TAC application
Click "Grant admin consent for TAC"