Skip to main content
Help Center

Set up single sign-on (SSO)

Step by step: set up single sign-on (SSO) via Microsoft Azure AD in teamspace – grant access to Microsoft Graph, assign Azure AD users and enable SSO per user.

Prerequisites

With single sign-on (SSO), your users sign in to teamspace via their Microsoft account (Azure AD). In this guide you will learn how to configure SSO in teamspace and link the Azure AD accounts with the teamspace accounts.

1. Open the configuration

Click your user profile picture in the top right. A side menu opens. There, go to Configuration.

Side menu via the user profile picture with the Configuration entry
Open the configuration via the user profile picture in the top right.

2. Open the interfaces

Click General and then Interfaces.

General configuration area with the Interfaces menu item
In the configuration, under "General" choose the "Interfaces" item.

3. Grant access to Microsoft Graph

On the left in the menu you will find the Actions category. There, choose Grant access to Microsoft Graph.

Left-hand Actions menu category with the Grant access to Microsoft Graph entry
In the "Actions" category, choose the "Grant access to Microsoft Graph" entry.

After clicking the Grant access to Microsoft Graph button, a further browser tab or a new window opens. With this you allow access from teamspace to your Microsoft Graph. This is used to be able to link the Azure AD users.

An administration account is required to grant the access.

Microsoft sign-in in the new browser tab to grant access to Microsoft Graph
Microsoft sign-in with an administration account to grant the access.

After the Microsoft sign-in, you receive an overview of the required permissions. To confirm these, click Accept. You are then redirected back to teamspace.

Overview of the permissions required by teamspace with the Accept button
Overview of the required permissions – confirm with "Accept".

4. Assign Azure AD users

Now go back into the Configuration and to Interfaces. In the left-hand category under Actions you will find the Assign Azure AD users menu item. Click it – a dialog window then opens.

Assign Azure AD users menu item in the Actions category
In the "Actions" category, open the "Assign Azure AD users" menu item.

In this dialog you assign the Azure AD user to the appropriate teamspace user in the respective drop-down menu. In this guide, an AD user was assigned to the user Barbara Beratung. Finally, click Save.

Dialog for assigning the Azure AD users to the teamspace users via drop-down menus
In the dialog, select the appropriate Azure AD user for each teamspace user and save.

5. Enable SSO for the user

Go to Configuration → Users & rights → Users. Select the respective user (Barbara Beratung in this guide) to open the user configuration.

Users and rights configuration with the Users menu item
Under "Users & rights", open the "Users" area.
User list with the selected user Barbara Beratung
Select the desired user from the list.

In the user settings you will find the User account tab in the upper menu. Open this item. Here you will find the Single sign-on option with three possible settings.

User account tab with the Single sign-on option and the three available values
In the "User account" tab, set the "Single sign-on" option.

The three values mean:

  • Disabled: SSO login is disabled.
  • Enforced: SSO login is enforced and essential in order to sign in to teamspace.
  • Allowed: Both SSO login and the teamspace login are allowed.

6. Signing in to teamspace with SSO

Open the login page of your teamspace. Two ways to sign in are now available there. Depending on the setting, you can use both or only one way to sign in.

To sign in with SSO, click the Sign in with Microsoft button. You are redirected to Microsoft and sign in there with your Microsoft credentials. You are then redirected to teamspace.

teamspace login page with the Sign in with Microsoft button for SSO login
On the login page, sign in via SSO using "Sign in with Microsoft".

Notes

  • A Microsoft administration account is required to grant access to Microsoft Graph.
  • Access to Microsoft Graph is the prerequisite for being able to link the Azure AD users in teamspace.
  • The SSO setting is defined per user in the “User account” tab (Disabled / Enforced / Allowed).
  • With the Enforced setting, signing in is possible exclusively via SSO – the regular teamspace login is then no longer available for that user.

Common questions & needs

You want to …How to
Enable SSO in generalIn the configuration, under “General → Interfaces → Actions”, use “Grant access to Microsoft Graph” (with an admin account and “Accept”).
Link Azure AD accounts with teamspace usersVia “Actions → Assign Azure AD users”, in the dialog select the AD user from the drop-down for each user and save.
Allow SSO for a user but keep the normal loginIn the user, under “User account”, set the “Single sign-on” option to Allowed.
Allow signing in only via SSOSet the “Single sign-on” option to Enforced.
Disable SSO for a userSet the “Single sign-on” option to Disabled.
Sign in with SSOOn the login page, use the “Sign in with Microsoft” button.