Skip to content
English
Contact us
  • There are no suggestions because the search field is empty.

How to set up Microsoft Single Sign-on

A guide on setting up Microsoft SSO in GetHomeSafe

Microsoft single sign-on (SSO) lets your users log in to GetHomeSafe with their existing Microsoft work credentials. This removes the need for a separate GetHomeSafe password and makes access easier to manage. GetHomeSafe uses OpenID Connect (OIDC) to connect with Microsoft Entra ID.

Once Microsoft SSO is working, you can also turn off the other login methods (password, Google and Apple) so that everyone must sign in with Microsoft.

Before you start: Every user must already have a GetHomeSafe account, and the email address on that account must match their Microsoft (Entra) email address. If someone needs to be added, contact your GetHomeSafe account owner or GetHomeSafe Support.

Setting up Microsoft SSO

The simplest way to get started is to send an access request from a GetHomeSafe user account. A Microsoft Entra administrator in your organisation then approves the request, which creates the GetHomeSafe application in your Entra directory.

Step 1: Send an access request

  1. Open the GetHomeSafe login screen and choose to log in with Microsoft.
  2. Sign in with your Microsoft work account.
  3. If your organisation requires administrator approval for new applications, you will see an option to Request approval instead of an Accept button. Select it and submit the request.

Step 2: Approve the request in Microsoft Entra

This step needs to be completed by a Microsoft Entra administrator in your organisation.

  1. Sign in to the Microsoft Entra admin center.
  2. Go to Enterprise applications and select Admin consent requests.
  3. Open the GetHomeSafe request. You can review the application details and the permissions it is requesting.
  4. If you are happy with the permissions, approve the request.

Approving the request creates the GetHomeSafe Enterprise Application listing in your Entra directory, and Microsoft SSO is now ready to use.

Step 3: Check that it works

Ask the person who sent the request to log out and log back in using Microsoft. Once that works, other users in your organisation can log in the same way.

Not sure how users complete their first login? See Completing your GetHomeSafe Registration.

Turning off other login methods

If you want everyone to log in with Microsoft, you can turn off the other login methods. This is done by an Enterprise administrator.

  1. Log in to your GetHomeSafe Enterprise.
  2. In the left-hand menu, select Configure, then Account.
  3. Select Security.
  4. Turn off the login methods you no longer want to allow (password, Google and Apple).
  5. Click Save.

Important: Only turn off the other login methods once you have confirmed that Microsoft SSO works for your administrators. This avoids anyone being locked out

Troubleshooting

  • I don't see a Request approval option: Your Entra settings may allow users to approve applications themselves, or the application may already have been approved. Try logging in with Microsoft again, or ask your IT team to check whether GetHomeSafe is already listed under Enterprise applications.
  • A user can't register or log in with Microsoft: Check that their GetHomeSafe email exactly matches their Microsoft (Entra) email. See How to Resolve SSO Registration Failures for GetHomeSafe.
  • I want to sync users and teams from Entra: This is a separate feature from SSO. See Microsoft Entra ID Integration.

If you need further help, contact GetHomeSafe Support at support@gethomesafe.com