---
schema_version: "1"
id: cb442f9cccfaaec733364afdcafd1bfab33afce32b0a67482a04172dda414224
title: Configuring Azure AD
collection: admin
version: current
locale: en-us
portal_url: https://docs.salesforce.com/admin/current/en-us/commerce/264-0-0/rt_cms_configure_azure_ad.md
canonical_url: https://help.salesforce.com/s/articleView?id=commerce.rt_cms_configure_azure_ad.htm&release=264.0.0&type=5
source_site: help.salesforce.com
content_type: documentation
content_hash: 1e2c75d369f502c588adb81e2b3093e488f9c709c269e4ee5a963c5b5bd155f8
description: Set up Azure Active Directory (AD) to work with Point of Sale CMS.
products:
  - Commerce
release: "264"
---
# Configuring Azure AD

Set up Azure Active Directory (AD) to work with Point of Sale CMS.

Complete the following steps before configuring Point of Sale CMS.

1. Create and configure an Azure Active Directory Domain Services managed domain.
2. Set up the Point of Sale CMS app.
3. Enable ID Tokens for this app.
4. Obtain Tenant ID — The merchant tenant ID can be found on the Directory’s overview page.
    
    When logged into Azure, use the search bar and search for azure active.
    
    Select the search results for Azure Active Directory.
    
    Copy the Tenant ID value.
5. Obtain Client ID — The client ID can be found in the Directory’s App Registration section.
    
    Select the search results for Azure Active Directory.
    
    Find the Point of Sale CMS app.
    
    Copy the Application (Client) ID.
6. Configure Salesforce Redirect URIs for staging and Production environments.
7. Add Optional Claims in Token Configuration.
    1. Select Token configuration and then select **Add optional claim**.
    2. Select **ID** as the Token type and select the email option. You get a warning that the claim (email) requires OpenId Connect coupes to be configured through the API permission page. Select the checkbox to turn on the Microsoft Graph email permission (required for claims to appear in tokens).
    3. Confirm your selections and select **Add**.