What is SSO?

Single Sign-On (SSO) allows users to sign in to REMPLAN using their organisation's Microsoft Entra ID account instead of a separate REMPLAN password. This provides a more secure and convenient sign-in experience.

Before you start

This guide is for organisational IT, business administrators and subscription owners.

SSO works with Microsoft Entra ID, which is Microsoft's service for managing user accounts and sign-ins. Your organisation needs a Microsoft Entra ID account to use SSO.

Important: Once SSO is turned on, everyone must sign in using SSO. Password sign-in stops working for all users.

Request SSO

Contact REMPLAN Support on [email protected] to request SSO.
Advise in your email request of the planned date and time to turn on SSO
Tell your users about the change before the agreed date and time.
Complete domain verification, if REMPLAN Support asks for it. This confirms your organisation owns the email domain.
Ask your IT administrator to connect Microsoft Entra ID to REMPLAN before the agreed date and time.
Test SSO with a small group of users after it's turned on.

Note: If domain verification doesn't work using your email domain, REMPLAN may ask for your Microsoft Entra Tenant ID. This is your organisation's unique ID in Microsoft Entra ID.

Plan how you tell your users

Agree on a date and time so your organisation can tell users about the change in advance.

Your message to users should explain:

when SSO will start
that password sign-in will stop working
that they must choose the Microsoft sign-in option
who to contact if they can't sign in
REMPLAN will confirm with requesting person before and after the change.

Configure Microsoft Entra ID for REMPLAN SSO

This guide is for IT administrators.

Before you start, your organisation administrator must have already requested SSO and agreed on an activation date and time with REMPLAN Support.

REMPLAN SSO is available for organisations using Microsoft Entra ID for authentication. The integration uses delegated user consent and follows your organisation's existing Microsoft Entra MFA configuration.

Before activation

Confirm your domains. Give REMPLAN Support each email domain that should use SSO. If matching by domain isn't enough, REMPLAN may ask for your Microsoft Entra Tenant ID, which is your organisation's unique ID in Microsoft Entra ID.
Agree on the activation date and time. Choose a time that gives your organisation enough notice to tell users in advance, update internal sign-in instructions, have IT support available, and test access straight after.
Notify users. Before activation, tell users the date and time SSO starts, that their REMPLAN password will stop working, that they must sign in using Microsoft, and where to report sign-in problems.

Complete the connection

Once REMPLAN confirms SSO is turned on:

Complete the first SSO sign-in. An organisation administrator, or another appointed REMPLAN user, must sign in using SSO for the first time. This connects REMPLAN to your organisation's Microsoft Entra tenant.
Review application settings, if needed. After the connection is made, your Microsoft Entra administrator can choose to set which users and groups can access REMPLAN, whether the application is visible to users, and whether user assignment is required. If you don't change these settings, REMPLAN is available and visible to everyone by default.

Important: No Microsoft administrator consent is needed to connect REMPLAN. REMPLAN only asks for the minimum account information it needs for SSO, such as username and email address.

Test access

Straight after activation:

Ask a small group of users to sign in using Microsoft.
Check that existing users can access their REMPLAN subscription.
Check that a new user can complete onboarding, if this applies.
Fix any issues before telling everyone the change is complete.

Confirm the rollout

Once testing succeeds, tell your users that SSO is active. From now on, they must use Microsoft sign-in to access REMPLAN.

What happens next

Your users sign in to REMPLAN using their Microsoft Entra ID account. Password sign-in is no longer available.

Availability and access

Once SSO is enabled, password-based sign-in is disabled for all users.

FAQ

Will my REMPLAN password still work after SSO is turned on?

No. Once SSO is active, password sign-in is disabled for everyone. You must sign in using Microsoft.

What if we can't verify our domain?

REMPLAN may ask for your Microsoft Entra Tenant ID instead.

Does REMPLAN need our Microsoft administrator's consent to connect?

No. The connection uses delegated user consent, so no administrator consent is required in advance.

Who completes the first SSO sign-in?

An organisation administrator, or another REMPLAN user your organisation appoints, completes the first sign-in.