---
type: Documentation
title: Single sign-on with Microsoft
description: What single sign-on with Microsoft Entra ID does for your organisation,
  which plans include it, and where to find the step-by-step setup guide.
resource: https://www.librario.de/en/docs/integration/sso-mit-microsoft
language: en
revision: e114aa541d24c57e452957a2313c85d2014b716b
tags:
- docs
- integration
---

# Single sign-on with Microsoft

> **Plan option:**
> 
> Available in plans with **single sign-on**. [Compare plans→](/en/preise)



Single sign-on (SSO) connects Librario to Microsoft Entra ID, the identity platform of Microsoft 365. Your colleagues sign in to Librario with their usual Microsoft credentials:

- **No separate passwords**: people use the Microsoft account they already have.
- **Automatic onboarding**: a new colleague signs in and Librario creates their user on first sign-in, as long as your plan has free seats. Nobody has to send an invitation.
- **Central access control**: sign-in runs through your Microsoft infrastructure. Once you disable a Microsoft account in Entra ID, that person can no longer sign in to Librario. You still assign roles in Librario in [user management](/en/docs/administration/benutzerverwaltung).

At the first SSO sign-in, Librario creates the user with the name and email address from Microsoft, without a role, so the person has [basic access](/en/docs/administration/rollen#basiszugang). You then assign roles such as Librarian in user management.
When all seats on your plan are taken, Librario creates no user: the person sees the page **Unable to sign in**, and administrators and librarians receive an email, at most once an hour.

Single sign-on is an option on our custom plans. Your plan includes it when the account settings show the section **Single sign-on with Microsoft**. Once it is set up, the sign-in page of your Librario address (`https://<your-company>.mylibrar.io`) shows the button **Sign in with Microsoft Entra ID**.

Librario does not remove leavers automatically. Delete people who have left in [user management](/en/docs/administration/benutzerverwaltung) as well, so their seat becomes free again.

## Setup guide

The step-by-step guide, from the app registration in Microsoft Entra ID to the settings in Librario and renewing the client secret, is only available in German: [Single Sign-on mit Microsoft](/de/docs/integration/sso-mit-microsoft). It quotes the labels of the Microsoft Entra admin centre in English, such as **App registrations**, **API permissions** and **Certificates & secrets**, so your IT team can follow the steps by the screen labels.