Sign-in (SSO)
Users sign in to Eurion with e-mail and password, or with an external identity provider. The providers are set up in the admin portal under Identity Providers.
What works in 1.6.4
| Provider | Status in 1.6.4 |
|---|---|
| Microsoft Entra ID (formerly Azure AD) | Supported. The Microsoft Entra ID button is shown on the sign-in page when the provider is switched on. |
| Google Workspace | Not supported yet. The sign-in flow exists but has not been tested against Google. Do not switch it on. |
| SAML 2.0 / eIDAS | Not supported yet. Responses from the provider are checked from 1.6.3, but sign-in has not been tested against a real provider. Do not switch it on. |
Good to know
- Local accounts remain. Signing in with e-mail and password always works, even when a provider is switched on.
- Keep a local super administrator. Updates and other sensitive actions require you to confirm your password. That is not possible with an SSO account. See Microsoft Entra ID.
- Roles. New SSO users get the roles in Default Roles (default
member). For Entra ID, groups can be mapped to roles, see Group mapping. - Blocking a user. An account that is linked to Entra ID and blocked in Users cannot sign in with Microsoft either. Remove the user in Entra ID as well.
- Sign-in attempts with SSO, successful and failed, are recorded in the audit log (Audit Logs).