# Sign in With Microsoft

- Link: https://www.agilicus.com/anyx-guide/sign-in-with-microsoft/
- Published: 2024-05-14T00:24:28+00:00
- Author: Don Bowman

1. [Home](https://www.agilicus.com/)
 2. Sign in With Microsoft

![cyber-insurance-compliance](https://www.agilicus.com/www/69d5e171-hero.svg)

Theming, Auto-Create

---

## Sign in With Microsoft

[CONTACT](https://www.agilicus.com/contact-us/)

[⌊4cf6458a-image⌉⌊4cf6458a-image⌉[

On initial product signup you may be offered the ability to “Sign in with Microsoft(
Azure, Skype, …)”. This option is a zero-configuration setup, and will allow you
to assign users from any Microsoft certified source. This includes your own Active
Directory, but also can include XBox Live, Skype, hotmail, etc.

Once you have signed up, you have a choice. You can continue to use this pre-setup
shared Identity Provider. Or, you may [configure](https://www.agilicus.com/anyx-guide/azure-active-directory/)
the system to use your own Azure Active Directory.

The pro/con of each approach are discussed below.

[⌊b5901263-image⌉⌊b5901263-image⌉[

As an administrator, you will be granting access to this shared Microsoft Issuer.
The first time you sign in you will see a screen as below.

In it, you are requested to

This screen requests 2 permissions:

 1. “Sign you in and read your profile”. This is granting the Agilicus platform to 
    the following information, called ‘profile’ in OpenID terminology (for more information
    see Section 2.4 “Scope Values” of the [OpenID Connect specification](https://openid.net/specs/openid-connect-basic-1_0.html)).
 2.  * First Name
     * Last Name
     * Email
 3. Maintain access to data you have given it access to. This is commonly called a ‘
    refresh’ token, and it allows the platform to cache access so you can sign in a
    second time on the same device without re-authenticating.

There is a 3rd box, ‘Consent on behalf of your organisation’. Checking this will
ensure that end users are not asked these questions.

You may revoke access any time at [https://myapps.microsoft.com/](https://myapps.microsoft.com/)

[⌊ad10f88e-image⌉⌊ad10f88e-image⌉[

### Consideration: Theme & Branding

If you use the shared Identity provider you can set the theme & branding information
on the initial Agilicus screen. However, once the user chooses ‘SIgn in with Microsoft’
there is no option to set branding information. The end user will see a a generic
Microsoft screen.

### Consideration: Auto Create users

In the event you create and assign your own Azure Active Directory Application for
Agilicus you can use ‘auto create’ users. In this model you may choose to auto-trust.“
If my Active Directory trusts the user, so will Agilicus”.