Single sign-on for your company’s AI, with Microsoft Entra ID

Standard Compute gives your people Claude, GPT, Gemini and leading open models through one company account. They sign in with their work identity, and access to Claude Desktop and Claude Code follows your Microsoft Entra groups.

Can we use SSO with Microsoft Entra ID?
Connect Microsoft Entra ID or any SAML identity provider so your people sign in to Standard Compute with their work accounts. Anyone on your verified domain joins your company automatically.
Can employees sign in to Claude with a Microsoft work account?
Employees sign in to Claude Desktop and Claude Code with their Microsoft work account, through our EU gateway, so there are no API keys to hand out. Access follows your Microsoft Entra groups through SCIM provisioning.
Who sets it up?
A company administrator sets it up in the Standard Compute dashboard together with your Microsoft Entra admin. An IT partner can do it on your behalf in your own tenant.

Create a company workspace

Two kinds of sign-in, one company account

Website single sign-on is for the Standard Compute dashboard. Your people choose Continue with SSO, sign in through Microsoft Entra ID or any other SAML identity provider, and join your company as members. Everyone on your verified email domain lands in the right company without an invitation.

Claude work-account sign-in is for Claude Desktop and Claude Code. Employees choose Sign in with your organization in Claude and use their Microsoft work account. Requests go through our EU gateway, which terminates TLS and runs in Finland. Your Entra groups decide who is admitted, through SCIM provisioning, and each employee gets their own company key with its own budget.

Both run inside your own Microsoft tenant. Employees stay in your directory and nobody needs an account in a Standard Compute tenant.

Standard Compute dashboard, Single sign-on (SAML) settings: email domain verified, identity provider connected, single sign-on enabled.
Single sign-on settings in the Standard Compute dashboard. The company shown is example data.

Set up single sign-on in four steps

In the dashboard, open Resources, then Single sign-on (SAML).

  1. Verify your domain

    Add your work email domain and create the DNS TXT record shown in the dashboard. Your MX records stay as they are.

  2. Create a SAML application in Microsoft Entra

    In the Microsoft Entra admin center, create an enterprise application with SAML sign-on and paste the Entity ID and the reply (ACS) URL that Standard Compute shows you.

  3. Connect and test

    Copy the application’s App Federation Metadata URL into Standard Compute and choose Test sign-in with an ordinary member account.

  4. Enable

    Choose Enable SSO. Your people open the sign-in page, choose Continue with SSO and use their work email.

Let employees sign in to Claude with their work account

In the dashboard, open Resources, then Claude Microsoft sign-in. The page walks you through four stages: connection, Microsoft provisioning, member access and Claude.

  1. Register two apps in Microsoft Entra

    One app registration for the gateway API with a delegated inference scope, and one for the Claude desktop client. No client secret is created or distributed.

  2. Prepare the connection

    Enter your tenant ID and the two application IDs in Standard Compute and choose Prepare connection.

  3. Connect Microsoft provisioning

    Create a provisioning application in Entra, paste the tenant URL and provisioning credential from Standard Compute, then choose the Entra groups whose members get access.

  4. Activate and roll out Claude

    Activate access and add the generated connection settings to your managed Claude configuration in Intune or your device management tool. Employees open Claude and choose Sign in with your organization.

Standard Compute dashboard, Claude Microsoft sign-in setup: step 2 of 4, connecting Microsoft Entra provisioning with a tenant URL and a provisioning credential.
Setting up Claude sign-in with Microsoft work accounts. The company shown is example data.

What single sign-on covers

CapabilityWhat it doesSet for
Dashboard single sign-onMicrosoft Entra ID or any SAML identity provider, such as OktaSet for: Company
Verified-domain joinAnyone on your verified email domain who signs in with SSO joins your company as a memberSet for: Company
Claude Desktop and Claude CodeSign in with a Microsoft work account, no API keys to hand outSet for: Company
Group-based accessMicrosoft Entra groups decide who is admitted, through SCIM provisioningSet for: Company
EU gatewayWork-account sign-in runs through our gateway in FinlandSet for: Company
A key per employeeEach employee gets their own company key, budget and usage historySet for: Person
Admin rolesAdmin and member roles in Standard Compute, separate from Entra admin rolesSet for: Company
AuditDomain verification and SSO changes appear in the admin audit logSet for: Company

Questions from IT, security and finance

Can I log into Claude with my Microsoft account? Our company uses Entra ID and people keep asking.
Yes. With Standard Compute, employees sign in to Claude Desktop and Claude Code with their Microsoft work account through our EU gateway, and access follows your Microsoft Entra groups through SCIM provisioning.
We need SSO with Microsoft Entra for all our AI tools (Claude, ChatGPT, API access). Is there one platform that does it with SCIM provisioning?
Standard Compute gives your people Claude, GPT, Gemini and open models through one company account. They sign in with Microsoft Entra ID or any SAML identity provider, and Claude Desktop and Claude Code access follows your Entra groups through SCIM.
Okta SSO for LLM API keys: how do enterprises stop devs from using personal OpenAI keys and tie usage to corporate identity?
Connect Okta or any other SAML identity provider so people sign in with their work account, then give every person and every app its own company key. All usage then runs through keys your company owns, each with its own budget.
AI gateway with Entra ID SSO and per-user API keys so we can offboard people instantly. Recommendations?
Standard Compute connects to Microsoft Entra ID and gives every person their own company key, which an admin can revoke at any time. For Claude Desktop and Claude Code, access follows your Entra groups through SCIM provisioning.
Can employees sign in to Claude with a Microsoft account? We have Entra ID and want SSO for everyone.
Employees sign in to Claude Desktop and Claude Code with their Microsoft work account, and your administrator chooses which Entra groups are admitted. Website sign-in for the dashboard uses the same Entra tenant through SAML.
Claude Code SSO with Azure AD: is that only on an enterprise plan? We’re 25 people.
Any company workspace can add single sign-on, whatever its size. Azure AD is now Microsoft Entra ID, and your 25 people sign in to Claude Code with their work accounts, each on their own key and budget.
Is there a way to sign in to AI tools with Microsoft Entra SSO for the whole company, both chat and API?
Your people sign in to the Standard Compute dashboard with Entra SSO and use Claude Desktop and Claude Code with their Microsoft work account. Applications use company API keys under the same account and the same rules.
Do employees need accounts in a Standard Compute Microsoft tenant?
No. Everything runs in your own Microsoft tenant, and employees stay in your directory.

For your security review

The full picture of what Standard Compute offers companies is on the enterprise overview. What we store, where it is stored and how it is protected is on the security page, with the sub-processor list and the DPA next to it.

Create your company workspace, verify your domain and connect Microsoft Entra ID from the dashboard.

Create a company workspaceor write to contact@standardcompute.com