Microsoft Entra ID (SSO)
Your organization can let users sign in to Squire with their Microsoft work account. Activating the connection takes one step, performed once by a Global Administrator of your Entra ID tenant. This page is written for the IT team that performs it.
How it works
Squire uses a multi-tenant app registration, so there is nothing for you to set up or exchange:
- No Enterprise Application to create manually, and no SAML metadata to exchange.
- After authorization, Squire is added automatically to the Enterprise Applications in your tenant.
- Your existing security, MFA and Conditional Access policies keep applying in full.
- Squire requests only minimal, delegated permissions (see below).
Requirements
- An account with the Global Administrator role in your Microsoft Entra ID tenant.
- The authorization is a one-time, organization-wide action. Individual users are not prompted for consent afterwards.
Requested permissions
Squire requests only the permission needed to sign a user in and link their account. No access is requested to mailboxes, files or any other data.
| Permission | Type | Purpose |
|---|---|---|
Sign in and read user profile (User.Read) | Delegated | Sign the user in and read the basic profile (name, email address) to link the account. |
Grant the authorization
Open the consent link
While signed in as a Global Administrator, open the Microsoft consent page:
Sign in with a Global Administrator account if you are prompted to.
Review and accept
Check the Microsoft consent screen, which lists Squire Health as the publisher and User.Read as the requested permission, then click Accept.
Confirm the result
You are redirected back to Squire with the confirmation “Microsoft consent received”. You can close the window.
Result
- Squire appears under Enterprise Applications in Entra ID.
- Users in your organization can sign in to Squire through Microsoft Entra ID SSO.