Connecting Thinkific to Microsoft using OAuth2 / Entra

To SSO from Microsoft to Thinkific using OAuth2, you will need the following details from your Microsoft system. This example assumes you are using Microsoft Online; for Azure, please see our other instructions. This system of login can sometimes be referred to as "Microsoft Entra"

Client ID
Client Secret
Discovery URL
Tenant ID (Available from the Discovery, Authorisation or Token URL)

To determine your tenant ID from your Discovery URL, assume the URL has the format of:

https://login.microsoftonline.com/abcd86f1-TEST-4b13-a702-TEST/v2.0/.well-known/openid-configuration

Your tenant ID is the part before /v2.0 and in this example would be:

abcd86f1-TEST-4b13-a702-TEST

Alternatively, you may be given an Authorisation or Token URL, e.g.

https://login.microsoftonline.com/{tenant-id}/oauth2/v2.0/authorize

https://login.microsoftonline.com/{tenant-id}/oauth2/v2.0/token

Where {tenant-id} is your Tenant ID and generally has a format such as:

abcd86f1-TEST-4b13-a702-TEST

Click Create Connection and enter your details, ensuring you include the tenant in the additional parameter by clicking Add and entering 'tenant' followed by your Tenant ID. When finished, the connection should appear as follows:

Click Create, and your connection is ready for use!