Overview

Microsoft Azure Active Directory is now Microsoft Entra ID

While you may still see its former name in some screenshots or steps, it does not affect the instructions in this guide.

If your company uses Microsoft Entra ID, an Administrator can add Procore as an enterprise application in your Microsoft Entra admin center to enable Single Sign-On (SSO) authentication for your organization's Procore users. This ensures your users securely log in from a desktop or mobile device using your company's preferred sign in process.

Supported Login Flows

Procore supports both IdP- and SP-initiated login flows with Microsoft Entra ID. In this setup, Microsoft Entra ID (your organization's identity portal) is the IdP (Identity Provider), and Procore is the SP (Service Provider).

Feature	IdP-Initiated SSO	SP-Initiated SSO
Starting Point	Organization SSO Portal / Dashboard	Procore Login Page
User Action	Clicks Procore tile inside company portal	Enters email at Procore login
Authentication Flow	IdP → Procore	Procore → IdP → Procore

For a complete list of supported identity providers, see Which SSO identity providers are supported by Procore?

Configuration Steps

Important: Before Starting SSO Configuration

Contact your Procore point of contact or Procore Support if your organization uses:

Portfolio Financials & Capital Planning. This solution requires additional configuration to complete authentication setup.
Procore Pay. This solution requires Multi-Factor Authentication (MFA) for Payments alongside SSO.

Microsoft Entra, the Microsoft Entra logo, and other Microsoft marks are trademarks or registered trademarks of Microsoft Corporation and/or its affiliates in the United States and/or other countries.