Threetone does not offer a released self-service Entra connection wizard. The existing SSO sign-in entry can route an already configured organization, but this guide does not supply a universal ACS URL or Entity ID.
Before you begin
You need an Entra administrator allowed to manage the enterprise application, a Threetone workspace owner, an agreed test cohort, and exact connection details supplied through the supported setup process.
These field relationships are documented in WorkOS’s Entra SAML guide. They do not establish a Threetone setup control.
1
Confirm the tenant and application
Record the tenant, enterprise application, intended workspace, and authorized users. Keep test and production connection details separate.
2
Review connection and identity mapping
Compare the supplied Entity ID and ACS URL with the application configuration. Review email and identity claims, user assignments, and signing-certificate ownership using Microsoft’s SAML setup documentation.
3
Verify the agreed rollout
Once the connection is configured, test the Threetone SSO entry with representative users. Confirm the resulting workspace and permissions, an unassigned user’s behavior, and administrator recovery before changing sign-in requirements.
Can I use the Threetone sign-in URL as the ACS URL?
Can I use the Threetone sign-in URL as the ACS URL?
Do not substitute it. Use the exact ACS value issued for the configured SAML connection.
Does Entra app assignment provision workspace groups?
Does Entra app assignment provision workspace groups?
Do not assume that. Directory provisioning and group mapping require a separately verified SCIM workflow.