Microsoft Entra SSO Setup

To set up Microsoft Entra SSO, first contact Station70 at Support@station70.com and request SSO setup. We'll send you a unique setup link — once you have it, follow the steps below.

Setup

  1. Navigate to the setup link provided by Station70
  2. In the Self-Service SSO wizard, select Entra ID
  3. Complete the steps to set up an App registration
  4. Fill in your Domain, Client ID, and secret from your App registration
  5. Assign users/groups in your Enterprise application
  6. Click Test Connection
  7. Accept the permissions in the popup that appears
  8. You should see "Test successful" (if not, contact Station70)

Required: Configure Email Claims

Without these steps, Station70 can't send email when a Microsoft Entra ID user logs in.

  1. In the App registration you just added in Microsoft Entra ID, go to Token configuration
  2. Add an optional claim → select ID → check Email
  3. When prompted, turn on the Microsoft Graph email, profile permission (required for the claim to appear in the token) — check the box and click Add
  4. Go to Users → select any user who will log in to Bunker → Edit Properties → Contact Information → make sure the Email field is populated with the address they'll log in with. Repeat for every user — this is the field the claim above pulls from.

Bunker Login

Before testing, let Station70 support know so they can enable your SSO connection and help debug if needed.

  1. Go to the Bunker login screen
  2. Log in with your Microsoft Entra ID email address — you'll be redirected to enter your Microsoft Entra ID credentials
  3. Set up or authenticate with your Security Key MFA if prompted
  4. If you see the Bunker dashboard, you've successfully logged in with Microsoft Entra ID

If you run into any errors, report them to Station70 support.

Related Articles