This topic tells you how to set up Microsoft Entra ID with Open ID Connect (OIDC) as the identity provider for Single Sign‑On for VMware Tanzu Application Service.

Microsoft Entra ID is Microsoft’s multitenant, cloud-based directory and identity management service.

To set up Microsoft Entra ID with Security Assertion Markup Language (SAML), see the Microsoft Entra ID SAML Integration Guide.


To integrate Microsoft Entra ID with Single Sign‑On using OIDC, you must have the following:

  • An active Microsoft Entra ID tenant
  • A user with admin privileges

Note To configure OIDC, you must have the Single Sign-On service broker installed on your Ops Manager deployment. You need to create a plan, grant any plan administrators, and specify any organizations this plan should be the authentication authority for. For help configuring plans, see the Manage Service Plans topic.

Microsoft Entra ID Integration Guide

Configuring Microsoft Entra ID with Single Sign‑On

To integrate your deployment with Microsoft Entra ID and Single Sign‑On, follow the steps in Configure Microsoft Entra ID as an OIDC Identity Provider.

Testing and Troubleshooting

check-circle-line exclamation-circle-line close-line
Scroll to top icon