Sign in with Microsoft
On Security, Sign in with Microsoft is Our app, your approval (a directory tenant ID and an approval link) or Your own app.
Open Security and find Sign in with Microsoft. The note is Choose how your Microsoft 365 accounts sign in. The two choices are Our app, your approval and Your own app. Turn on Google or Microsoft under How people sign in as well. See How people sign in. Google has no matching section.
Only a company administrator can change this. Anyone else sees Only a company administrator can change Microsoft sign-in. Saving can open Confirm it's you, and the line is Sign in with Microsoft asks for your second step before anything changes. If you still need to sign in again, the page says Studio asks again before a change like this. Sign in again, then come straight back.
Our app, your approval
- Choose Our app, your approval. The note is Enter your directory's tenant ID, then have an administrator approve the app once.
- Directory (tenant) ID is the value in Microsoft Entra, under Overview. It looks like
00000000-0000-0000-0000-000000000000. A value that is not that shape says That isn't a tenant ID. It's 36 characters, in five groups. - Choose Save. The page says Saved.
- Approval link for your administrator appears when the directory is saved and not yet approved. An administrator of your Microsoft directory opens it and approves once. It holds nothing secret, so you can send it to them. Use Copy or Open.
| Status | What it means |
|---|---|
| Not set up | No directory is saved yet. |
| Waiting for approval | Nobody from this directory can sign in with Microsoft until it's approved. |
| Approved | People in this directory can sign in. Microsoft sign-ins are only accepted from this directory. |
| Blocked by your directory | Your directory doesn't allow this app. Use your own app instead. |
If this Studio has no Microsoft app to approve, the page says Microsoft sign-in isn't available on this Studio yet. Its Microsoft app hasn't been registered, so there's nothing to approve. Whoever runs this Studio needs to finish that setup.
Your own app
- Choose Your own app. The note is Register an app in your own Microsoft Entra and enter its details.
- Enter Directory (tenant) ID and Application (client) ID. The client ID is on your app's Overview in Microsoft Entra. A bad client ID says That isn't a client ID. It's 36 characters, in five groups.
- Enter Client secret. Stored encrypted and never shown again. Enter a new one to replace it. After one is saved the field says A secret is saved. Enter a new one to replace it. With none it says No secret yet. Leaving it empty on a first save says Enter the client secret from your app.
- Copy Redirect address to register on your app and register that address on the app.
- Choose Save.
If this Studio cannot store the secret, the page says Your own app can't be saved on this Studio yet: it has nowhere safe to keep the client secret. Use our app for now, or ask whoever runs this Studio. A refusal from Microsoft says Microsoft didn't accept those details. Check the tenant ID, client ID and secret.