Integrate Yeastar Central Management with Microsoft SSO

You can integrate Yeastar Central Management with Microsoft SSO. After integrating, you, your colleagues, and your subordinate users can log in to Yeastar Central Management with Microsoft account.

Requirements

The firmware version of Yeastar Central Management is 87.19.0.76 or later.

Prerequisites

Prepare one of the following Microsoft identities:
Identity type Requirements
Work or school account The account must belong to a user in a Microsoft Entra ID tenant and the user must have permissions to register and manage applications.
Personal Microsoft account The account must be associated with a free Azure account, which automatically creates a Microsoft Entra ID tenant and grants the account permissions to register and manage applications.

Procedure

Step1. Obtain redirect URI from Yeastar Central Management

  1. Log in to Yeastar Central Management, go to System > Collaboration.
  2. Click beside the Redirect URI field to copy the redirect URI for later use.

Step2. Create and obtain credentials on Microsoft Entra admin center

  1. Log in to the Microsoft Entra admin center using your Microsoft identity, go to Entra ID > App registrations.
  2. Register an application.

    1. Click New registration.
    2. In the Name field, enter a name to identify the application.
    3. In the Supported account types drop-down list, select Any Entra ID Tenant + Personal Microsoft accounts.
    4. In the Redirect URI section, select Web in the platform drop-down list, and then enter the redirect URI obtained from Yeastar Central Management in the field beside the drop-down list.
    5. Click Register.

      The application is successfully registered and you are automatically redirected to its management page.

  3. In the registered application, create and obtain credentials for Microsoft SSO integration.
    1. Create a client secret.

      1. Go to Certificates & secrets.
      2. Under the Client secrets tab, click New client secret.

        A right panel pops up.

      3. In the Description field, enter a description to identify the client secret.
      4. In the Expires drop-down list, select the validity period for the client secret.
      5. Click Add.

        The client secret appears in the Client secrets list.

      6. Click to copy the value of the client secret for later use.
        Note: Be sure to save the value of the client secret before leaving the page. This value can only be viewed immediately after generation.
    2. Obtain client ID and tenant ID.

      1. Go to Overview.
      2. Hover your mouse over the Application (client) ID and click to copy the client ID for later use.
      3. Hover your mouse over the Directory (tenant) ID and click to copy the tenant ID for later use.

Step3. Enable Microsoft SSO on Yeastar Central Management

  1. Log in to Yeastar Central Management, go to System > Collaboration.
  2. Turn on the switch of Microsoft SSO.
  3. In the Microsoft SSO section, complete the following settings.

  4. Optional: Click Test to verify the connectivity.

    The pop-up message "Tested successfully." appears at the top of the page, indicating that the credentials are valid and the connection can be established.

  5. Click Save.

Result

Microsoft SSO is successfully integrated with Yeastar Central Management. A Sign in with Microsoft button appears on the login page, and all users (you, your colleagues, and your subordinate users) can click the button to log in to Yeastar Central Management using Microsoft account.
Note: You can choose to restrict your colleagues to logging in only via Microsoft SSO. For more information, see Configure Login Method for Colleagues.