Does this work with our existing conditional access policies?

Yes. CBT Nuggets sign-ins flow through the same Entra ID authentication context that your other SAML applications use, so conditional access (MFA, device compliance, location-based) applies automatically without any duplicate configuration on our side.

Is this branded as 'Azure AD' or 'Entra ID' in the Entra gallery?

Microsoft renamed Azure AD to Entra ID in 2023; the Entra application gallery lists CBT Nuggets under the Entra branding. The underlying SAML protocol behavior is unchanged from the Azure AD era.

Identity & SSO integration

Microsoft Entra ID integration

Single sign-on through Microsoft Entra ID (formerly Azure AD). Standard SAML 2.0 application setup; works with conditional access policies.

Request a Demo Read the Trust Center

Status: Generally available · Available on Team and Enterprise

What it does

How the Microsoft Entra ID integration works

CBT Nuggets registers as a SAML 2.0 enterprise application in your Entra ID tenant. Users sign in through your existing Microsoft 365 identity — the same credentials that gate Outlook, Teams, and SharePoint.

Conditional access policies you have already authored in Entra (MFA enforcement, trusted-network gating, device compliance) apply to CBT Nuggets logins automatically. There is no second policy surface to maintain.

Group-based assignment in the Entra admin center controls who has a seat. Removing a user from the assigned group revokes access at their next session.

Compliance & tier

Where this integration fits in your subscription and your audit trail

Available on

Team tier
Enterprise tier

Tier availability matches the Microsoft Entra ID integration scope your CBT Nuggets account team is authorized to enable. Talk to sales for non-standard configurations.

Compliance frameworks

No specific compliance framework attestations apply to this integration. See the Trust Center for the platform-level posture.

Setup

Wire up Microsoft Entra ID with your admin team

Add the CBT Nuggets SAML enterprise app
In the Entra admin center, navigate to Enterprise applications → New application → Browse the Entra application gallery for 'CBT Nuggets' and add it.
Configure the SAML SSO claims
Set the user identifier claim to `user.mail` (or your tenant's preferred immutable identifier). Required attribute claims are pre-populated from the gallery template.
Assign your CBT Nuggets users group
Under Users and groups, assign the Entra group whose members should have CBT Nuggets access. Group membership is the single source of truth.
Send your federation metadata to your CBT Nuggets account team
Download the federation metadata XML from the Entra SAML signing certificate panel and share it with your CBT Nuggets customer success contact.

Prerequisites

What you need on your side

Entra ID Global Administrator or Application Administrator role.
A CBT Nuggets Team or Enterprise subscription.
An Entra security group representing your CBT Nuggets-licensed users.

FAQ