> ## Documentation Index
> Fetch the complete documentation index at: https://docs.idemeum.com/llms.txt
> Use this file to discover all available pages before exploring further.

# Guide - JIT for Entra ID

> Set up JIT admin access to customer Entra ID tenants

## What is JIT for Entra ID?

In this guide we will set up [just-in-time Entra ID access](/jit-entra/jit-for-entra-overview) to customer Microsoft 365 tenants.

When you have multiple Entra ID tenants your technicians need to access, you can leverage idemeum to automatically manage individual on-demand admin accounts. Technicians request admin accounts, login to do their business, and then after some time the accounts will be disabled and passwords rotated. You can request Entra JIT accounts from idemeum portal, or you can integrate our platform with your ticketing system, so that you request Entra JIT accounts right from customer support tickets.

## Set up JIT for Entra ID

There are several steps involved to configure Entra ID access with JIT admin accounts.

<Info>
  We are assuming you already have your MSP idemeum cloud tenant provisioned. If not, reach out to our [support](/support) team for help.
</Info>

<Steps>
  <Step title="Create idemeum child tenant">
    As a first step you need to create a child organization in your parent MSP tenant.

    * Login to MSP admin portal
    * Navigate to `Tenants` and create a child organization

    <Info>
      More information about how to [create](/multi-tenant-portal/multi-tenant-portal-overview) a child organization.
    </Info>
  </Step>

  <Step title="Create Entra ID app and configure it in idemeum">
    At this step you need to create an application in Entra ID tenant and set up idemeum to connect to M365 tenant using that application.

    We have documented [step-by-step instructions](/jit-entra/configure-jit-for-entra) on how to set up Entra ID application. 
  </Step>

  <Step title="Test JIT for Entra ID login">
    * Navigate to the customer / organization admin portal
    * Search for Entra ID application and click on `...`
    * Now you can request JIT account and view provisioned credentials

          <img src="https://mintcdn.com/idemeum/FwFZapz3TUyw36-e/images/request%20entra.png?fit=max&auto=format&n=FwFZapz3TUyw36-e&q=85&s=20f689ead598a313450e81379baba176" alt="Request Entra" width="1600" height="1227" data-path="images/request entra.png" />
  </Step>
</Steps>