Integrations — Single Sign-On (Microsoft Entra ID)

Connect HousingSurvey Pro to your organisation's identity provider so staff sign in with their existing corporate credentials. Tiered — Basics for what SSO gives you, Deep dive for setup, Technical for administrators and integrators.

Basics — what SSO does

Staff sign in with their work identity (Microsoft Entra ID) instead of a separate password.
Access follows your directory — when someone leaves and is disabled in your IdP, their access here goes too.
It's optional, and applies to email/staff accounts; field surveyors without email use tenant logins instead (see app sign-in).

Deep dive — connecting Entra ID

Setup is done by an org admin under Settings → SSO & provisioning:

In your Microsoft Entra admin center, register HousingSurvey Pro as an enterprise application.
Provide the details the Settings page asks for (tenant/directory and application identifiers) and the redirect URL shown on that page.
Assign the users or groups who should have access.
Save the connection in HousingSurvey Pro and test a sign-in.

Keep at least one org-admin able to sign in by other means while you set SSO up, so you're never locked out mid-configuration.

Technical — for IT / identity admins

Standards: SSO federates your IdP into the platform's identity layer (Firebase Auth / Identity Platform), which brokers the OIDC/SAML connection with Entra ID.
Provisioning: users are matched/created on first successful sign-in; automated user lifecycle (SCIM-style provisioning/deprovisioning) is on the roadmap — until then, disabling a user in your IdP prevents new sign-ins.
Multi-tenancy: a person can belong to more than one HousingSurvey Pro organisation; SSO governs the staff sign-in for organisations that enable it.
MFA: enforce MFA at your IdP; the platform also supports app-level TOTP.
Session control: an admin can revoke a user's sessions (remote logout) from the dashboard.

Rollout note: SSO configuration and automated provisioning options are being delivered under the settings/provisioning track — confirm current availability on your Settings → SSO page.

Next: Integrations — AI provider keys (in progress), or back to the help index.