How can I set up Microsoft SSO for Spotler ID?

🧾 Overview

Spotler ID supports Single Sign-On (SSO) using your existing Microsoft Entra ID (formerly Azure AD) credentials.

This article explains:

• How sign-in works for your users

• What the first login experience looks like

• How you can control who is allowed to access Spotler ID

• Where to find sign-in and audit logs

🔐 How sign-in works

Spotler ID uses Microsoft Entra ID for authentication via SSO.

When a user signs in:

1. They are redirected to a Microsoft sign-in page

2. They log in with their usual work credentials

3. They are redirected back to Spotler ID

Authentication is handled securely using a standard OpenID Connect (OIDC) login flow.

👋 First-time login experience

When a user is invited to Spotler ID for the first time, they will:

1. Open their Spotler ID activation link

2. Click Sign in with Microsoft

3. Sign in on your Microsoft login page (if not already signed in)

4. Be redirected back to Spotler ID and logged in automatically

🔁 Next / repeat login experience

For future logins, users can go directly to:

https://login.spotler.cloud

They will then:

1. Click Sign in with Microsoft

2. Sign in on your Microsoft login page (if required)

3. Be redirected back to Spotler ID and logged in automatically

🎛️ How to control access

As a Microsoft Entra ID admin, you can control which users are allowed to access Spotler ID.

Option 1: Restrict access using user assignment (recommended)

1. Go to the Microsoft Entra admin center

2. Navigate to:
   Enterprise Applications → All applications

3. Find and open:
   Spotler ID

4. Go to Properties and set:
   User assignment required? = Yes

5. Go to Users and groups and assign only the users or groups who should have access

This ensures that only approved users can sign in.

Option 2: Use Conditional Access policies (optional)

If you want additional security controls—such as:

• Requiring MFA

• Blocking access from certain locations or devices

• Allowing only compliant devices

You can create a Conditional Access policy in:

Entra ID → Protection → Conditional Access

Make sure the policy targets the Spotler ID application (by name or App ID).

📊 User audit & sign-in logs

To monitor sign-in activity as an Entra ID admin:

1. Go to:
   Entra ID → Enterprise Applications → Spotler ID

2. Select Sign-ins

Here you can see who accessed the app and when.