# Shared identity

1. [Home](https://www.agilicus.com/)
2. [Agilicus AnyX Administrative Web Interface](https://www.agilicus.com/anyx-guide/agilicus-anyx-administrative-web-interface/)
3. [Authentication](https://www.agilicus.com/anyx-guide/agilicus-anyx-administrative-web-interface/authentication/)
4. Shared identity

![](https://www.agilicus.com/www/e28d73e0-featured-anyx-admin-authenticationshared-identity.png)## Shared identity

[CONTACT](/contact-us/)

The **Shared Identity** page (route `/shared-identity`) enables Agilicus-managed upstream identity providers. These are public sign-in providers (Apple, Google, Linkedin, Yahoo, and Microsoft) that Agilicus operates for you, so you can offer single sign-on to your users with no third-party application registration.

![Shared identity overview](https://www.agilicus.com/www/540c8dc8-shared-identity-overview.png)    ## Purpose

Shared identity is the simplest identity option in the portal. Agilicus runs the upstream provider integration for you, so enabling a provider is a single checkbox: your users then see that provider's sign-in button on your organisation's issuer page. The issuer URL shown at the top of the page (for example `https://auth.dbt.agilicus.cloud`) is the federation point your users sign in to.

The platform manages the following providers:

- **Sign in with Apple** for Apple IDs
- **Sign in with Google** for Google Workplace (corporate) or Gmail (personal) accounts
- **Sign in with Linkedin**
- **Sign in with Yahoo**
- **Sign in with Microsoft** for Office 365, Azure, or personal Microsoft accounts

## Why use it

- Offer familiar single sign-on buttons on the sign-in page without registering applications with each provider.
- Let users sign in with identities they already have, so there are no shadow accounts to manage (see [Identity and authentication](/anyx-guide/agilicus-anyx-administrative-web-interface/concepts/identity-and-authentication/)).
- Get going quickly: this is the zero-configuration path compared with [Custom Identity](/anyx-guide/agilicus-anyx-administrative-web-interface/authentication/custom-identity/).

## When to use it

- During initial setup, when you want public or consumer identity providers rather than a corporate directory.
- When you want to add or remove a sign-in option quickly.
- When you use Microsoft and want to control the account-selection behaviour.

**Prerequisite**: permission to administer issuers (an owner or administrator role). The page shows a *no permissions* message otherwise. Enabling a provider here only makes the identifier available; you still grant [authorisation](/anyx-guide/agilicus-anyx-administrative-web-interface/access/application-permissions/) to users in the Access section.

## How to use it

1. Open **Authentication > Shared Identity** from the left navigation.
2. Tick the checkboxes for the providers you want to offer. Each change saves immediately and updates your issuer asynchronously.

![Shared identity with Apple enabled](https://www.agilicus.com/www/7c54aa58-shared-identity-apple-enabled.png)    1. For Microsoft, optionally tick **For users with multiple microsoft accounts, force them to select a microsoft account explicitly** so a user with more than one Microsoft account is always asked which one to use.
2. Confirm the change after a few seconds by reloading the page. The providers you enable appear on your organisation's sign-in page.

## Fields and controls reference

| Control | Purpose | Required | Default | Notes |
|---|---|---|---|---|
| Issuer | The sign-in URL that federates the managed providers | Read-only | n/a | Your organisation's issuer URI |
| Sign in with Apple | Toggles Apple ID as a sign-in provider | No | Off |  |
| Sign in with Google | Toggles Google (Workplace or Gmail) as a sign-in provider | No | On | Corporate or personal accounts |
| Sign in with Linkedin | Toggles Linkedin as a sign-in provider | No | Off |  |
| Sign in with Yahoo | Toggles Yahoo as a sign-in provider | No | Off |  |
| Sign in with Microsoft | Toggles Microsoft (Office 365, Azure, or personal) as a sign-in provider | No | On |  |
| Force Microsoft account selection | Requires users with multiple Microsoft accounts to choose one explicitly | No | Off | Only active when Microsoft is enabled |

## Dialogs and popups

There are no dialogs on this screen. Configuration is entirely checkbox-based. Upstream group mappings and user identity management belong to the other identity screens: see the row actions on [Custom Identity](/anyx-guide/agilicus-anyx-administrative-web-interface/authentication/custom-identity/) and [Onsite Identity](/anyx-guide/agilicus-anyx-administrative-web-interface/authentication/onsite-identity/), and user identity under [Users](/anyx-guide/agilicus-anyx-administrative-web-interface/access/users/).

## Configuration versus diagnostics versus confirmation

- **Configuration**: enabling and disabling the managed providers, and the Microsoft account-selection option.
- **Diagnostics**: the issuer URL is informational; there are no live diagnostic counters on this screen. Provider health appears on the [Authentication Overview](/anyx-guide/agilicus-anyx-administrative-web-interface/authentication/overview/).
- **Confirmation**: there are no destructive actions. Disabling a provider takes effect immediately; users who only had that provider will not be able to sign in until you enable it again or give them another provider.

## Pagination and async behaviour

- There is no table on this screen, so no pagination applies.
- Provider changes apply asynchronously: after toggling a checkbox, wait a few seconds and reload to confirm. Propagation to the live sign-in page can take a little longer.

## Troubleshooting

- **The provider I enabled does not appear on the sign-in page**: wait for propagation, reload, and confirm the checkbox is still ticked after the page reloads.
- **Users with multiple Microsoft accounts are not asked to choose**: enable the **force them to select a microsoft account explicitly** option.
- **A user cannot sign in with a provider**: confirm the provider is enabled here and check the sign-in attempts in the [authentication audit](/anyx-guide/agilicus-anyx-administrative-web-interface/organisation/authentication-audit/).
- **I need more control than a shared provider offers**: register your own provider under [Custom Identity](/anyx-guide/agilicus-anyx-administrative-web-interface/authentication/custom-identity/).

## See also

- [Identity and authentication](/anyx-guide/agilicus-anyx-administrative-web-interface/concepts/identity-and-authentication/)
- [Authentication overview](/anyx-guide/agilicus-anyx-administrative-web-interface/authentication/overview/)
- [Custom identity](/anyx-guide/agilicus-anyx-administrative-web-interface/authentication/custom-identity/)
- [Onsite identity](/anyx-guide/agilicus-anyx-administrative-web-interface/authentication/onsite-identity/)
- [Application identity](/anyx-guide/agilicus-anyx-administrative-web-interface/authentication/application-identity/)
- [Authentication policy](/anyx-guide/agilicus-anyx-administrative-web-interface/authentication/authentication-policy/)
- [Getting started: identify users](/anyx-guide/agilicus-anyx-administrative-web-interface/getting-started/identify-users/)

## Web guide

- [Identity and authentication methods](https://www.agilicus.com/product-guide/identity-and-authentication)
- [Sign in with Microsoft](https://www.agilicus.com/product-guide/sign-in-with-microsoft)