From 15129b809577d5b57aca76e11692389c4400c621 Mon Sep 17 00:00:00 2001 From: Claude Date: Fri, 14 Aug 2026 01:22:52 +0000 Subject: [PATCH 1/2] Correct plan availability for Azure Entra ID SSO Azure Entra ID (Azure AD) is set up through the custom SAML path, which is an Enterprise plan feature, so Entra ID SSO is Enterprise-only. Add an Enterprise plan note to the Entra ID page and annotate the supported providers list on the SSO overview page with the plans each provider is available on. Co-Authored-By: Claude Opus 5 (1M context) Claude-Session: https://claude.ai/code/session_01REYYduTXK8Qx2ktxzd7ABu --- pages/platform/sso.md | 16 ++++++++-------- pages/platform/sso/azure_ad.md | 3 +++ 2 files changed, 11 insertions(+), 8 deletions(-) diff --git a/pages/platform/sso.md b/pages/platform/sso.md index 508a0e635c3..1d2c7afe274 100644 --- a/pages/platform/sso.md +++ b/pages/platform/sso.md @@ -15,14 +15,14 @@ You can enforce SSO authentication for your entire Buildkite organization by ens Buildkite supports the following SSO providers: -* [Okta](/docs/platform/sso/okta) -* [ADFS](/docs/platform/sso/adfs) -* [GitHub](/docs/platform/sso/github-sso) -* [Google Workspace](/docs/platform/sso/google-workspace) -* [Google Workspace (SAML)](/docs/platform/sso/google-workspace-saml) -* [Azure Active Directory](/docs/platform/sso/azure-ad) -* [OneLogin](/docs/platform/sso/onelogin) -* [Custom SAML](/docs/platform/sso/custom-saml) +* [Okta](/docs/platform/sso/okta) (Pro and Enterprise plans) +* [ADFS](/docs/platform/sso/adfs) (Enterprise plan only) +* [GitHub](/docs/platform/sso/github-sso) (Pro and Enterprise plans) +* [Google Workspace](/docs/platform/sso/google-workspace) (Pro and Enterprise plans) +* [Google Workspace (SAML)](/docs/platform/sso/google-workspace-saml) (Pro and Enterprise plans) +* [Azure Active Directory](/docs/platform/sso/azure-ad) (Enterprise plan only) +* [OneLogin](/docs/platform/sso/onelogin) (Pro and Enterprise plans) +* [Custom SAML](/docs/platform/sso/custom-saml) (Enterprise plan only) ## Adding SSO diff --git a/pages/platform/sso/azure_ad.md b/pages/platform/sso/azure_ad.md index 9270edee7f2..e53d660edab 100644 --- a/pages/platform/sso/azure_ad.md +++ b/pages/platform/sso/azure_ad.md @@ -2,6 +2,9 @@ You can use [Microsoft Entra ID](https://www.microsoft.com/en-us/security/business/identity-access/microsoft-entra-id#Overview) (formerly known as Azure Active Directory) as an SSO provider for your Buildkite organization. To complete this tutorial, you need admin privileges for both Azure and Buildkite. +> 📘 Enterprise plan feature +> Microsoft Entra ID (Azure AD) SSO is only available to Buildkite customers on the [Enterprise](https://buildkite.com/pricing) plan. + > 📘 You can also set up SSO providers manually with GraphQL. > See the SSO setup with GraphQL guide for detailed instructions and code samples. From d8d5e4a0a327a2938bd9f7691903e1a63b381384 Mon Sep 17 00:00:00 2001 From: Claude Date: Fri, 14 Aug 2026 06:25:50 +0000 Subject: [PATCH 2/2] Rename Azure Active Directory to Azure Entra ID in SSO docs Microsoft renamed Azure Active Directory to Entra ID, so update the user-facing display text across the SSO docs: - pages/platform/sso.md: supported providers list entry - pages/platform/sso/azure_ad.md: 'edit or update your ... provider settings' callout - data/nav.yml: sidebar nav label (path unchanged) - data/llm_descriptions.yml: platform/sso provider list description Also removes the per-provider plan annotations added to the supported providers list earlier in this branch, as requested. URL slugs, file paths, heading anchors, Azure Portal UI labels (for example 'Provision Azure Active Directory Groups') and ADFS naming are deliberately unchanged. Co-Authored-By: Claude Opus 5 (1M context) Claude-Session: https://claude.ai/code/session_01VxSbqy6sef7hmYXzDmoHwo --- data/llm_descriptions.yml | 2 +- data/nav.yml | 2 +- pages/platform/sso.md | 16 ++++++++-------- pages/platform/sso/azure_ad.md | 2 +- 4 files changed, 11 insertions(+), 11 deletions(-) diff --git a/data/llm_descriptions.yml b/data/llm_descriptions.yml index fe18fbd2b22..1fe590a7fa8 100644 --- a/data/llm_descriptions.yml +++ b/data/llm_descriptions.yml @@ -386,7 +386,7 @@ platform/cli/reference/update: "CLI reference for bk update: update the installed bk CLI or print update instructions, handling Homebrew, mise, and standalone binary installations." platform/cli/reference/user: "CLI reference for bk user: invite users to your organization." platform/cli/reference/version: "CLI reference for bk version: display the installed CLI version." - platform/sso: "Overview of SSO support, listing providers (Okta, ADFS, GitHub, Google, Azure AD, OneLogin, custom SAML)." + platform/sso: "Overview of SSO support, listing providers (Okta, ADFS, GitHub, Google, Azure Entra ID, OneLogin, custom SAML)." platform/sso/okta: "Configuring Okta as an SSO provider with SAML and optional SCIM user provisioning." platform/sso/adfs: "Step-by-step setup of Active Directory Federation Services (ADFS) as an SSO provider." platform/sso/google-workspace: "Setting up Google Workspace (G Suite) as an SSO provider using OpenID." diff --git a/data/nav.yml b/data/nav.yml index f9a0b734509..70ff03c2ccb 100644 --- a/data/nav.yml +++ b/data/nav.yml @@ -977,7 +977,7 @@ path: "platform/sso/github-sso" - name: "OneLogin" path: "platform/sso/onelogin" - - name: "Azure AD" + - name: "Azure Entra ID" path: "platform/sso/azure-ad" - name: "Custom SAML" path: "platform/sso/custom-saml" diff --git a/pages/platform/sso.md b/pages/platform/sso.md index 1d2c7afe274..21572c6b44e 100644 --- a/pages/platform/sso.md +++ b/pages/platform/sso.md @@ -15,14 +15,14 @@ You can enforce SSO authentication for your entire Buildkite organization by ens Buildkite supports the following SSO providers: -* [Okta](/docs/platform/sso/okta) (Pro and Enterprise plans) -* [ADFS](/docs/platform/sso/adfs) (Enterprise plan only) -* [GitHub](/docs/platform/sso/github-sso) (Pro and Enterprise plans) -* [Google Workspace](/docs/platform/sso/google-workspace) (Pro and Enterprise plans) -* [Google Workspace (SAML)](/docs/platform/sso/google-workspace-saml) (Pro and Enterprise plans) -* [Azure Active Directory](/docs/platform/sso/azure-ad) (Enterprise plan only) -* [OneLogin](/docs/platform/sso/onelogin) (Pro and Enterprise plans) -* [Custom SAML](/docs/platform/sso/custom-saml) (Enterprise plan only) +* [Okta](/docs/platform/sso/okta) +* [ADFS](/docs/platform/sso/adfs) +* [GitHub](/docs/platform/sso/github-sso) +* [Google Workspace](/docs/platform/sso/google-workspace) +* [Google Workspace (SAML)](/docs/platform/sso/google-workspace-saml) +* [Azure Entra ID](/docs/platform/sso/azure-ad) +* [OneLogin](/docs/platform/sso/onelogin) +* [Custom SAML](/docs/platform/sso/custom-saml) ## Adding SSO diff --git a/pages/platform/sso/azure_ad.md b/pages/platform/sso/azure_ad.md index e53d660edab..de979e28399 100644 --- a/pages/platform/sso/azure_ad.md +++ b/pages/platform/sso/azure_ad.md @@ -56,7 +56,7 @@ Then, on your [Buildkite organization **Settings**](https://buildkite.com/organi Once you've [performed a test login](#step-4-perform-a-test-login) you can enable your SSO provider using the **Enable** button. Enabling the SSO provider will not force a log out of any signed in users, but will cause all new or expired sessions to authorize through Azure AD before accessing any organization data. > 🚧 ->If you need to edit or update your Azure Active Directory provider settings, you will need to disable the SSO provider first. +>If you need to edit or update your Azure Entra ID provider settings, you will need to disable the SSO provider first. ## Using SCIM to provision and manage users