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

The Auth0 Microsoft 365 Single Sign-on (SSO) Integration lets you create a client application that uses Auth0 for authentication and provides SSO capabilities. Single sign-on provides with Microsoft 365 is a giant leap forward in how users sign in and use applications. Your users can use the same O365 email address and password (credentials) to access your MyHub site so they no longer need to remember another password.

Microsoft 365 single sign-on (SSO) adds security and convenience when your users sign on to applications with Auth0. With single sign-on, users sign in once with one account to access domain-joined devices, company resources, software as a service (SaaS) applications, and web applications.

<p>The Office 365 <a href="https://auth0.com/docs/sso">Single Sign-on (SSO)</a> Integration creates a client application that uses Auth0 for authentication and provides SSO capabilities for Office 365. Your users log in to Office 365 with Auth0 <a href="https://auth0.com/docs/identityproviders">identity providers</a>, which means the identity provider performs the identity credentials verification.</p>


<h2 id="prerequisites">Prerequisites</h2>
<p>Before you begin:</p>
<ul>
<li>  Sign up for an Office 365 account.</li>
<li>  <a href="https://auth0.com/docs/identityproviders">Set up a connection</a>, which is a source of users. Connections can be databases, social identity providers, or enterprise identity providers, and can be shared among different applications. You may set up more than one connection for use with SSO integrations.</li>
</ul>


<h2 id="configure-auth0-sso-integration">Configure Auth0 SSO Integration</h2>
<p>Enter a name for your SSO Integration, configure the following settings, and click <strong>Save</strong>.</p>
<table>
<thead>
<tr>
<th><strong>Setting</strong></th>
<th><strong>Description</strong></th>
</tr>
</thead>
<tbody><tr>
<td>Domain</td>
<td>Your Office 365 domain. Format: <your-office365-domain>.com.</td>
</tr>
<tr>
<td>Auth0 Connection</td>
<td>Connection you have configured in Auth0. In most cases, you will use an Active Directory connection. You can also configure a Database connection, but only for testing an already-configured Office 365 tenant. If you are doing <a href="https://auth0.com/docs/integrations/office-365-custom-provisioning">custom provisioning</a>, select additional connections in the Connections view.</td>
</tr>
</tbody></table>
<p><img src="https://auth0.com/docs/media/articles/dashboard/sso-integrations/dashboard-integrations-sso-create_settings.png" alt="Save Integration"></p>


<h2 id="configure-integration-with-office-365">Configure integration with Office 365</h2>
<p>To configure the integration with Office 365, follow the instructions listed in the <strong>Tutorial</strong> view (which will appear when you save the initial configuration settings).</p>


<h2 id="enable-connections">Enable connections</h2>
<p>Choose the connections to use with your SSO integration. Users in enabled connections will be allowed to log in to Office 365. By default, all configured connections are enabled.</p>
<ol>
<li>Select the <strong>Connections</strong> view.</li>
<li> Toggle the sliders next to connection names to enable or disable them. <img src="https://auth0.com/docs/media/articles/dashboard/sso-integrations/dashboard-integrations-sso-create_view-connections.png" alt="Enable/Disable Connections"></li>
</ol>


Office 365 - With Microsoft 365 SSO and Auth0, users sign in once to access Microsoft supported clients

Office 365 Integration with Auth0

Office 365

With Microsoft 365 SSO and Auth0, users sign in once to access Microsoft supported clients

When single sign-on is deployed, on-premises Outlook users are prompted for their credentials when accessing archived content in the Exchange Online organization for the first time.

Exchange Online Archiving

You can control account policies through Active Directory, which gives you the ability to manage password policies, workstation restrictions, lock-out controls, and more, without having to perform additional tasks in your Microsoft 365 or Office 365 organization.

Policy control

Forgotten passwords are a common source of support calls in all companies. If users have fewer passwords to remember, they are less likely to forget them.