Skip to content
Documentation
View as Markdown

Single sign-on with Microsoft

Single sign-on (SSO) connects Librario to Microsoft Entra ID, the identity platform of Microsoft 365. Your colleagues sign in to Librario with their usual Microsoft credentials:

  • No separate passwords: people use the Microsoft account they already have.
  • Automatic onboarding: a new colleague signs in and Librario creates their user on first sign-in, as long as your plan has free seats. Nobody has to send an invitation.
  • Central access control: sign-in runs through your Microsoft infrastructure. Once you disable a Microsoft account in Entra ID, that person can no longer sign in to Librario. You still assign roles in Librario in user management.

At the first SSO sign-in, Librario creates the user with the name and email address from Microsoft, without a role, so the person has basic access. You then assign roles such as Librarian in user management. When all seats on your plan are taken, Librario creates no user: the person sees the page Unable to sign in, and administrators and librarians receive an email, at most once an hour.

Single sign-on is an option on our custom plans. Your plan includes it when the account settings show the section Single sign-on with Microsoft. Once it is set up, the sign-in page of your Librario address (https://<your-company>.mylibrar.io) shows the button Sign in with Microsoft Entra ID.

Librario does not remove leavers automatically. Delete people who have left in user management as well, so their seat becomes free again.

Setup guide

The step-by-step guide, from the app registration in Microsoft Entra ID to the settings in Librario and renewing the client secret, is only available in German: Single Sign-on mit Microsoft. It quotes the labels of the Microsoft Entra admin centre in English, such as App registrations, API permissions and Certificates & secrets, so your IT team can follow the steps by the screen labels.