Document setting up SSO with Azure Entra ID

[aldy505]

This is aggregated from Discord, should be put into sentry-docs soon.

good day, i just installed a selfhosted version of Sentry, per the docs, but after configuring SSO w/ entra id, after logging in w/ my personal account i see that the logged in user is the initial admin account that was created, not my personal account

even in incognito mode the logged in user is the initial admin account instead of the one i used through entra login

before configuring SSO i created an account w/ the same email as i want to use through SSO, but because our instance is not public, and the invitation mail is not arriving i wanted to setup SSO,
after setting up SSO it said something about an account that was not active or linked or something, so i decides to delete it and try logging on again, with the above result

when i let a colleague login through SSO it properly creates a new account

how can i "cleanup" my own account?

is there a trash somewhere?

aha, i created someone else as owner, and then clicked "leave" w/ the initial account, when i login now i get the question to merge both accounts or not, so i guess i have to say no
the thing still gave me an error 500 after logging in again, but after restarting in incognito and logging in again it properly created new account for me and i had my colleague promote me again to owner

ok, after recreating our setup again i went through the same dance:

1. setup sentry w/ initial owner account
2. configure SSO w/ entra id
3. create someone else owner
4. remove initial owner account (after sso setup it is somehow linked to the account (mine) that logs in during sso setup)
5. login w/ my personal account again
6. sentry asks to merge initial owner account with mine
7. choose no thanks
8. sentry now gives error 500 after each sso login w/ my account
9. try again in incognito mode works fine
10. initial owner account is somehow back