Single Sign On

Capture support sign-in with Microsoft Entra ID.

Settings

In your company, you can enable the use of Microsoft Authentication. Follow these steps to enable Microsoft Authentication in your company:

1. Go to your company settings.
2. Click on the Enable Microsoft Authentication toggle. Now a few extra options will be visible.
3. Enter one or multiple Email Domains, these are the supported domains for your company. (e.g. for user@vintecc.com, you should enter vintecc.com). An email domain can only be used once in the platform, this email domain is used to check whether a user is allowed to sign in with Microsoft Authentication.
4. You can optionally enable two extra options:

• Microsoft authentication required: when this is enabled, users can only log in using their Microsoft. (This can be overridden in the user's settings).
• Microsoft registration allowed: when this is enabled, users can sign with Microsoft even when they don't have an account yet. With this option enabled, you must choose the default role this new user will be given.

There are also 2 extra options in the user's settings:

• (only if Microsoft is required on the company level): Can always sign in with username/password makes it possible for a user to sign in with their username and password even when Microsoft Authentication is required.
• (only when creating a user): Microsoft authentication required: when this is enabled, the user can only sign in with Microsoft Authentication.

Migration

If you enabled Microsoft Authentication Required in your company, but already have a bunch of users in the system, they should be migrated. Currently there is only one option:

• When the user log's in with their username and password, they will be asked to connect their account with Microsoft. This will make it possible for them to sign in with Microsoft Authentication in the future. Their username and email address will be updated to the one they used to sign in. Their password will be removed.