Skip to main content

How to set up SSO in TextUs with Azure

You can enable Single Sign-On (SSO) with Azure for your TextUs account to allow your users to easily and securely log in the TextUs web app, mobile app, and Chrome extension.

This guide provides you with instructions for requesting and activating SSO with Azure.

Getting started with Azure SSO

Note: Your Azure admin should complete the steps in this guide to ensure your configuration has the correct account settings and permissions.

To integrate Azure SSO with your TextUs account, complete the following steps:

  • Step 1: Locate your domain in Azure AD

  • Step 2: Request the configuration

  • Step 3: Activate the connection

Step 1: Locate your domain in Azure AD

To enable Azure SSO, you will need to provide TextUs with your primary Azure AD domain name found in the Primary domain field on the Overview tab of your Azure AD setup.

Step 2: Request the configuration

Next, submit a support request to the TextUs Help Center to enforce SSO through Azure. The following is an example support request:

Please enable the following domains for SSO to our TextUs account for Example Incorporated. Our identity provider is Azure AD.

  • exampleIncorporated.com

  • exampleCorporation.com

  • example.com

Step 3: Activate the connection

After the TextUs Customer Experience team confirms that the domains are enabled for SSO, complete the following steps:

  1. Enter your email address associated with one of the domains listed in the previous section.

  2. On the pop up menu, click Log in with Azure.

  3. Click Allow on the TextUs is requesting access to your Azure AD Domain pop up.

    1. If you see "Need Admin Approval" instead of "Allow," please see the below section.

The domain is authorized for Azure users to log in to TextUs. If you have multiple domains, repeat steps 1-4 to authorize each additional domain.

Your users can now log in to TextUs using Azure from the login screen of the web app, mobile app, or Chrome extension. If you have any questions or issues during the setup process, contact TextUs Technical Support.

If You See "Need Admin Approval" Instead of "Allow"

TextUs is a multi-tenant Microsoft Entra application. The first time someone in your organization consents, TextUs is automatically added as an Enterprise Application in your Entra tenant — you do not need to register or create anything in Entra ID yourself.

However, many organizations restrict users from consenting to new applications. If yours does, users will see a "Need admin approval" message instead of the Allow prompt. A Microsoft Entra administrator can grant consent for the whole organization in one of the following ways:

Option 1 (recommended): Have an admin sign in first.

  1. Have a Microsoft Entra administrator complete steps 1–4 above using their own TextUs login.

  2. On the Microsoft consent prompt, check the box "Consent on behalf of your organization", then click Accept.

This grants consent for your entire organization in one step. TextUs will now appear in your Enterprise Applications, and all other users can sign in without any approval prompts.

Option 2: Approve a user's pending request.

If your organization has Microsoft's admin consent workflow enabled, users who see "Need admin approval" can submit an approval request directly from that screen. An administrator can then approve it in the Microsoft Entra admin center under Enterprise applications → Admin consent requests. Once approved, all users can sign in.

Option 3: Request an admin consent link from TextUs.

Contact TextUs Technical Support and ask for the TextUs admin consent link. An Entra administrator opens the link, signs in, and accepts — this grants consent for your entire organization without any user needing to attempt login first.

Verifying consent later: Once TextUs appears in your tenant, an administrator can review or re-grant its permissions at any time under Enterprise applications → TextUs → Permissions → "Grant admin consent". TextUs only requests basic sign-in permissions (openid, profile, email) — it does not request access to your directory, files, or mail.

Did this answer your question?