SSO Setup (Azure AD)
Enable single sign-on so your team signs in to LeadFuel with their corporate Microsoft credentials.
Before You Start
- A LeadFuel Enterprise plan
- Admin access in LeadFuel
Open Security Settings
Go to Settings → Security in your LeadFuel dashboard. This page is only visible on the Enterprise plan.
You'll see the SSO Connection section with fields for your Azure AD configuration.
If you don't see the Security tab, your account may be on a different plan. Check Settings → Billing to confirm you're on Enterprise.
Configure Your Email Domain
In the Allowed Email Domain field, enter your organization's email domain — for example, acme.com.
This tells LeadFuel which users should be prompted to sign in via SSO. Anyone with an email address at this domain will see the SSO option when they sign in.
Use your primary corporate email domain. If your company uses multiple domains, contact support and we can help configure additional domains.
Enable SSO
Toggle Enable SSO to on. This activates single sign-on for users with your configured email domain.
Optionally, toggle Enforce SSO (disable password login) if you want to require all users to sign in through Azure AD. When enforced: - Users can only sign in via their Microsoft corporate account - The admin who configured SSO retains password access as an emergency backdoor - SSO-only users who need to be converted to password login can use the password reset flow
Save and Test
Click Save Settings to apply your configuration.
To test, open a private/incognito browser window, go to the LeadFuel sign-in page, and enter an email address with your configured domain. You should see a Sign in with Azure AD button. Click it to verify the Microsoft sign-in flow works correctly.
If this is the first time anyone from your organization is signing in, Microsoft may show a consent prompt asking you to approve LeadFuel's access to basic profile information (name and email).
Test without enforcing SSO first. Once you've confirmed sign-in works, you can enable enforcement.