Quick Answer
To connect DentalOS to Microsoft Entra for single sign-on (SSO), enable SSO in your DentalOS security settings, copy the Azure app registration values into your Entra tenant, then enter your Tenant ID, Client ID, and Client secret in DentalOS. DentalOS currently supports SSO with Microsoft Entra only.
Applies To
Product: DentalOS
Plan: All plans
Role: Admin
Before You Begin
- You must have access to your organization's Microsoft Entra tenant to complete the app registration steps.
- Every DentalOS user must have an email address on their DentalOS user record, and their DentalOS username must match their Entra email address for SSO to work.
- DentalOS does not provision users from Entra automatically. Users must be added manually in DentalOS. See "User management limitations".
- Once SSO is enabled, it applies to all users the next time they sign in. There are no exemptions and no way to roll SSO out in phases.
Steps
- Navigate to 'My Organization', then select 'Manage security settings'.
- Select the 'SSO' tab, select 'Edit Configuration' if the settings are not editable, and turn on 'Enable SSO'.
- Copy the Azure app registration values displayed in DentalOS - the redirect URI and the Microsoft Graph permissions - into the app registration in your Entra tenant.
- From your Entra tenant, copy your Tenant ID, Client ID, and Client secret, then enter each value in the corresponding field in DentalOS.
- Enter a display name for the SSO login in the 'Name' field.
- Save your changes.
Expected Result
When complete, SSO is active for your DentalOS organization. All users will be prompted to sign in through Microsoft Entra the next time they sign in. If a field shows a red validation message when you enter your values, such as "Enter valid tenant ID", "Client ID must be a valid UUID", or "Client secret is required", see "Troubleshoot SSO setup errors".
Need More Help?
If these steps did not resolve your issue, contact Planet DDS Support and include the following:
- Screenshot or screen recording of the issue
- Your account name or Practice Group ID (PGID)
- The exact error message text, if any
- What you were doing when the issue occurred