Microsoft Entra ID Single Sign-On

Use Microsoft Entra ID authentication with your Swarmia organization

Once Microsoft Entra ID authentication has been enabled for your Swarmia organization, it's no longer possible for app users to authenticate using other methods

Prerequisites

• A Microsoft Entra user with one of the following roles:

  • Privileged Role Administrator

  • Cloud Application Administrator

  • Application Administrator

  • Custom role that has permission to grant permissions to applications

Admin consent

Admin consent is required to allow user-delegated permissions and optionally to later enable assignment required to let only specified users to log in.

An Entra admin can consent using the URL below:

https://app.swarmia.com/microsoft/consent

Once an admin has consented users in the tenant will not need an admin's consent to sign in to Swarmia.

User-delegated permissions requested by Swarmia

Permission	Description
email	Allows Swarmia to read your users' primary email address
offline_access	Allows Swarmia to continue have read access to user profile without user reauthorizing
openid	Allows users to sign in to Swarmia
profile	Allows Swarmia to se your users' basic profile, e.g. display name
User.Read	Allows Swarmia to read basic company information of the signed-in user

Sign up to Swarmia instance using Entra ID

After granting the admin consent, sign up with Microsoft to create your Swarmia organization. This will set Microsoft Entra as authentication provider for your organization. By default, the whole Microsoft tenant has access to login your organization.

Configure the Microsoft Entra ID login to existing Swarmia organization

With Swarmia admin access, connect Microsoft Entra ID authentication for your organization.

The installation will:

• verify that you have access to your organization's Microsoft Entra ID tenant

• enable the Microsoft Entra ID authentication for your organization

• expire all current GitHub-initiated sessions

• require you to log in again

1. Navigate to the Microsoft Entra ID settings page

2. Click Connect Microsoft Entra ID

3. Login back with Microsoft Entra ID by clicking Sign in with Microsoft