This section will walk you through how to enable the Can Login With Microsoft permission for selected user groups so that those users can log in with Microsoft!

Before You Begin

Important:  The user's email used to log into Microsoft must match their email in Gingr to log in correctly.

• Your user group must have the Can Login With Microsoft permission to sign in with Microsoft SSO.
  
  
• Microsoft SSO is configured to work with both personal Microsoft accounts as well as organizational accounts.
  
  
• If you, or your organization, has implemented Multi-Factored Authentication on your Microsoft account, you must complete them as part of the login process into Microsoft for authentication.

Enable Microsoft SSO for User Groups

1. Navigate to Left-hand Navigation: Reports & More » Groups » App Permissions.
   
   
2. Navigate to Employee & Schedule Management permission section.
   
   
3. Enable the Can Login with Microsoft permission for all desired user groups.

Related Resources

• Microsoft Single Sign-On Topic Outline
• Log In with Microsoft Single Sign-On How-To
• Allow Microsoft Graph's Read.User API How-To
• Don't Have Permission to Log In with Microsoft Troubleshooting
• Microsoft SSO: Email Address Doesn't Match Any User Account in Gingr Troubleshooting
• Microsoft SSO: Can't Accept Permission for gingr-businessportal-oauth Troubleshooting