Microsoft 365 SSO
Microsoft 365 SSO allows your team to log into Readybuild using their existing Microsoft 365 credentials. This eliminates the need for separate passwords and simplifies user management.
Benefits
- Simplified login - Users sign in with their existing Microsoft credentials
- Centralized management - Control access through Azure AD
- Enhanced security - Leverage Microsoft's authentication infrastructure
- Reduced password fatigue - One less password to remember
Setting Up SSO
Step 1: Navigate to Integration Settings
- Go to Settings > Integrations in Readybuild
- Find Microsoft 365 in the list
- Click Configure
Step 2: Connect Microsoft 365 SSO
- Find the Microsoft 365 SSO card
- Click Connect
- Sign in with your Microsoft administrator account
- Review the permissions requested
- Click Accept to grant consent
Step 3: Configure Domain Restriction (Optional)
To restrict which Microsoft accounts can log in:
- After connecting, expand the SSO configuration
- Enter your company's email domain in the Domain Restriction field (e.g.,
yourcompany.com) - Click Save
This ensures only users with email addresses from your domain can access Readybuild via SSO.
Connection Status
| Status | Meaning |
|---|---|
| Connected (green) | SSO is fully configured and working |
| Partial (yellow) | Connected but needs domain restriction configured |
| Disconnected (gray) | SSO not enabled |
How Users Log In
Once SSO is enabled, users can:
- Go to the Readybuild login page
- Click Sign in with Microsoft
- Enter their Microsoft 365 credentials
- Access Readybuild without a separate password
Users must have an existing Readybuild account with a matching email address. SSO authenticates existing users—it does not create new accounts.
Disconnecting SSO
- Go to Settings > Integrations > Microsoft 365
- Click Disconnect on the SSO card
- Confirm the action
Note: Users will need to use their Readybuild passwords after disconnecting SSO. If they don't remember their password, they can use the "Forgot Password" feature.
Troubleshooting
"Unable to sign in" Error
Causes:
- Microsoft account email doesn't match domain restriction
- SSO not properly connected
- Browser caching issues
Solutions:
- Verify your Microsoft account email matches the domain restriction
- Check that SSO is properly connected in Readybuild settings
- Clear browser cookies and try again
- Contact your IT administrator to verify Azure AD configuration
User Has No Readybuild Account
SSO only works for existing users. If a Microsoft user tries to log in but has no Readybuild account:
- An administrator must first create the user in Readybuild
- The user's email in Readybuild must match their Microsoft email
- After the account exists, SSO login will work
Azure AD Consent Issues
If the connection fails during setup:
- Ensure you have Global Administrator or Application Administrator permissions
- Check that your organization allows third-party app consent
- Contact your Azure AD administrator if consent is blocked by policy
Security Considerations
- Domain restriction is recommended - Without it, any Microsoft account could potentially access your Readybuild
- Azure AD policies apply - Conditional access, MFA, and other Azure AD security policies affect SSO login
- Token revocation - Disconnecting SSO immediately invalidates all SSO sessions