Skip to content
Ask the community about this page

Configure single sign-on with Azure AD

Timextender Orchestration & Data Quality 25.2+Timextender Data Platform 26.1+cloud

Single sign-on with Azure AD lets users sign in to Orchestration, Data Quality and Data Enrichment with their organisational identity.

Section stub

This page exists so the cross-references from the Entra groups and user management pages resolve. Only the parts that the roles work depends on are documented here; the full SSO setup walkthrough has not been migrated in this demo build.

Sign-in URL

Use login.timextender.com for version 25.2 and later.

Legacy URL

login.exmon.com applies only to customers on versions before 25.2.

App Registration requirements for Entra group roles

If you intend to back TDP roles with Entra groups, the App Registration needs two additions beyond basic SSO:

  1. The TDP URL registered as a Single-page application redirect URI, so the group Browse picker can call Microsoft Graph from the browser.
  2. The Group.Read.All delegated permission, with admin consent granted, so that call returns the tenant's groups.

See Use Entra groups for roles for what breaks when either is missing.

Discussed in the community

Looking for related questions…

Didn't find your answer? Ask the community about this page — questions are answered by Timextender experts, partners and other users.