How to Enable Microsoft SSO

1. Navigate to Settings > Authentication & Access.

2. Select Log in with Microsoft Azure.

3. Upon saving, all existing users will receive an automated email notifying them that the login method has changed.
   
4. User Activation: Users should open the notification email and click Sign in with Microsoft Azure.

5. On the Sastrify login page, select the Sign in with Microsoft button.

6. Follow the standard Microsoft prompts to enter credentials and grant permission.

Once these steps are complete, Microsoft SSO is active for your organization.

Technical Specifications

1. Sastrify utilizes OIDC (OpenID Connect) for Microsoft integrations. This provides a more modern, API-driven authentication flow compared to traditional SAML.
2. Microsoft SSO requires a Service Provider (SP)-initiated flow. This means users must start their login process at the Sastrify login page.