Enabling single sign-on (SS0)
INVOLVE offers single sign-on (SSO) for organisations on the Premium tier plan. The SSO is via Microsoft Entra.
How to enable SSO
-
Navigate to My Organisation and select the Settings tab
-
Scroll down to the bottom and choose Single sign-on, which is under the Security & Permissions heading
-
When the Single Sign-On modal appears, enter your Azure tenant ID
-
Enter your organisation's domain name and select the add button. Repeat this step if necessary
-
Once you are done, select the Save button to finalise
Note: Only Billing Owners and Organisation Administrators can access these settings
How to find your Azure tenant ID
You can look up your Azure tenant ID by visiting the website below and entering your domain name.
You can use the tool at https://gettenantpartitionweb.azurewebsites.net/ to get your tenant ID.
Admin Approval for SSO
When setting up Single Sign-On (SSO) for INVOLVE, you may encounter a screen requesting admin approval that looks like this:
-
App Name: EDUKA SOLUTIONS PTY LTD or eduka.com
-
Message: "This app requires your admin's approval to:"
-
View users' basic profile
-
Maintain access to data you have given it access to
-
This approval prompt appears because your organisation's IT department has configured admin consent policies in Microsoft Entra ID (formerly Azure AD). These security policies require administrator approval for new applications before users can access them.
This is a normal security measure and indicates your IT team has implemented proper governance controls.
How to remove SSO
-
Navigate to My Organisation and select the Settings tab
-
Scroll down to the bottom and choose Single sign-on, which is under the Security & Permissions heading
-
When the Single Sign-On modal appears, select the red Remove SSO button at the bottom
-
A warning will appear. Please read before you confirm the removal of SSO for your organisation