Skip to main content
The Microsoft 365 SSO integration allows your team to sign in to Regentra using their Microsoft work account. When SSO is enabled, the login page shows a Sign in with Microsoft button. Clicking it redirects to Microsoft, the user authenticates with their work account, and Regentra creates or matches a user record by email domain. The user’s role is whatever your admin set on their Regentra account; Microsoft only handles authentication.

​
What it provides

  • Single sign-on — Sign in with Microsoft work account
  • Conditional Access — Regentra honors your tenant’s Conditional Access policies, including MFA requirements
  • Multi-tenant support — MSP techs sign in to your tenant; clients sign in to theirs

​
Setup

1

Open Authentication & SSO

In Regentra, navigate to Settings → Authentication & SSO.
2

Enable SSO

Under Single Sign-On, toggle SSO on.
3

Enter your Tenant ID

Enter your Microsoft 365 Tenant ID (a GUID you can copy from the Entra admin center → Overview).
4

Save

Save. The login page now shows the Sign in with Microsoft button to anyone whose email domain matches your tenant’s verified domains.

​
Frequently asked questions

No. Regentra honors whatever Conditional Access policy your tenant enforces — including MFA. If your tenant requires MFA, the user gets prompted by Microsoft before the redirect back to Regentra. Regentra also enforces app-level MFA when configured per-user.
Yes — under Settings → Authentication & SSO, set ‘Force SSO for users with @yourdomain emails’. Password-based sign-in is then disabled for those users.
Existing users keep working. They can sign in via password OR Microsoft. The two paths converge on the same Regentra account by email match — no double-account.
Yes — each Regentra organization configures SSO independently. MSP techs sign in to your tenant; clients sign in to theirs. The login page detects the tenant from the email domain.
SSO is for authenticating your team. The Compliance Entra integration is for collecting evidence from your Microsoft tenant. They are separate Entra apps with separate consent and lifecycles.