Single Sign-On (SSO) in Supportbench – Microsoft Entra (Azure AD)

Overview

Supportbench supports authentication through Microsoft Entra (formerly Azure Active Directory) using Microsoft’s native "Sign in with Microsoft" integration.

This is a simplified authentication integration, not a full enterprise SAML/OIDC SSO configuration with manual certificate exchange, claim mapping, or identity provider configuration.

In practical terms:

• There is no complex SSO setup

• No manual metadata configuration

• No certificate handling

• No claim mapping

• No custom SAML policies

Instead, authentication is handled directly through Microsoft’s secure OAuth flow.

What This Means (Plain Language)

This behaves like SSO from a user experience perspective, but technically it is:

Microsoft-authenticated login (OAuth) rather than traditional enterprise SSO (SAML/OIDC federation setup)

Users:

• Click "Sign in with Microsoft"

• Authenticate with their Microsoft account

• Are securely authenticated into Supportbench

No passwords are stored in Supportbench.

Admin Setup (Microsoft Entra)

Step-by-Step

1. Admin (O365) navigates to Supportbench login page

2. Click "Sign in with Microsoft"

3. Microsoft authentication prompt appears

4. Admin signs in with their Microsoft Entra (or O365) account

5. Microsoft consent screen appears

6. Admin approves permissions

7. Integration is complete

That’s it — no manual configuration required.

How It Works (Technical View)

• Uses Microsoft’s native OAuth authentication flow

• Microsoft handles:

  • Identity verification

  • Authentication security

  • Session validation

  • Token issuance

Supportbench:

• Trusts Microsoft as the identity provider

• Uses Microsoft’s authentication tokens

• Does not store user passwords

User Login Experience

For users, the flow is simple:

1. Go to Supportbench login page

2. Click "Sign in with Microsoft"

3. Microsoft login screen appears

4. User authenticates with Microsoft

5. User is logged into Supportbench

Key Benefits

• No passwords stored in Supportbench

• Microsoft-managed authentication security

• MFA enforcement via Entra policies

• Conditional Access support

• Zero credential duplication

• Fast deployment

• Minimal admin overhead

Important Clarification

This is not traditional enterprise SSO configuration such as:

• SAML federation

• Manual IdP metadata exchange

• Certificate-based trust

• Attribute/claim mapping

• Custom identity policies

It is a Microsoft-native authentication integration that provides SSO-like behavior without the complexity.

Summary

Supportbench uses Microsoft’s secure authentication system to allow users to log in using their Microsoft accounts.

Setup requires:

• Clicking "Sign in with Microsoft"

• Approving Microsoft permissions

• No complex configuration

This provides:

• Secure authentication

• Simple deployment

• Enterprise-grade identity security

• Seamless user login experience

Without the operational overhead of traditional SSO systems.

If your organization already uses Microsoft Entra for identity management, Supportbench authentication can be enabled in minutes with no infrastructure changes or complex configuration requirements.