--- title: Single sign-on (SSO) with Microsoft description: Let employees log in with their Microsoft work account. Your IT department creates an app in Microsoft Entra ID and Teamlead switches on SSO. --- [Skip to content](https://kennisbank.teamlead.io/en/single-sign-on-sso-with-microsoft#main-content) - [English](https://kennisbank.teamlead.io/en/single-sign-on-sso-with-microsoft) - [Nederlands](https://kennisbank.teamlead.io/nl/single-sign-on-sso-met-microsoft) English Show submenu for translations ![Teamlead](https://kennisbank.teamlead.io/hs-fs/hubfs/main-logo-horizontal-png-dark.png?width=176&height=32&name=main-logo-horizontal-png-dark.png) Open main navigation Close main navigation - - [English](https://kennisbank.teamlead.io/en/single-sign-on-sso-with-microsoft) - [Nederlands](https://kennisbank.teamlead.io/nl/single-sign-on-sso-met-microsoft) English Show submenu for translations - [Tickets](https://servicedesk.teamlead.nl/tickets) [Tickets](https://servicedesk.teamlead.nl/tickets?hsLang=en) Hi. How can we help you? - There are no suggestions because the search field is empty. 1. [Teamlead Knowledge Base](https://kennisbank.teamlead.io/en?hsLang=en) 2. [Connections](https://kennisbank.teamlead.io/en/connections?hsLang=en) # Single sign-on (SSO) with Microsoft ## Let employees log in with their Microsoft work account. Your IT department creates an app in Microsoft Entra ID and Teamlead switches on SSO. With single sign-on (SSO), employees log in with their usual work account, without a separate Teamlead password. Your IT department decides who has access, and security such as MFA then also applies to Teamlead. ### How does it work? 1. Request SSO via support@teamlead.io. 2. Teamlead sends your IT department the SAML details (endpoints) for your organisation. These are different for each customer and are therefore not included in this article. 3. IT creates an app in Microsoft Entra ID (see below) and supplies the federation metadata. 4. Teamlead switches on SSO and gives you your organisation's login link. There is no screen in Teamlead for setting up SSO yourself. ### Steps for IT in Microsoft Entra ID Microsoft Entra ID was previously called Azure Active Directory (Azure AD). 1. Go to portal.azure.com and open Microsoft Entra ID (**Azure Active Directory** in older screens). 2. Choose **+ Add** \> **Enterprise application**. 3. Choose **Create your own application**. Enter Teamlead as the name and choose the **Non-gallery** option. 4. Choose **Set up single sign on** and then **SAML**. 5. Under **Basic SAML Configuration**, click **Edit**. Enter the Teamlead endpoints and click **Save**. 6. Send the **Federation Metadata URL**, or the federation metadata file (XML), to your contact person at Teamlead. 7. Give the employees who use Teamlead access to the app, for example via a group. ### Logging in with your organisation's link - Employees log in via app.teamlead.nl/?c=organisatiecode. You get the organisation code from Teamlead. - The login screen then shows **Use single sign-on to log in:** with a **Log in with** button, followed by the name of the login method that Teamlead has set up for your organisation, for example Microsoft. - Tip: bookmark the link before you open it. The first time, you are redirected and your browser remembers your organisation. If you only create the bookmark after that, you will later end up on the regular login screen. - The link also works on your phone and outside the company network. You can also add it as a tile on your intranet. ### Good to know - Teamlead recognises someone by the email address from Entra ID. It must be the same as the email address in Teamlead. - Does someone with access to the app not have a Teamlead account yet? Then Teamlead creates one automatically at their first login, as an employee at all locations. So manage access in Entra ID. - A deactivated account becomes active again when the person logs in via SSO. If you want to remove someone's access, also remove them from the group in Entra ID. - You grant administrator rights in Teamlead via **Account management**, not via a group in Entra ID. - Teamlead can switch off logging in with a password, so that everyone logs in via SSO. Request this via support. Forgotten password and self-registration then no longer work. ### Not working? - **Access denied**: have IT check whether the employee is in the right group for Teamlead. If someone used to work in another department, check whether they are back in the group. If it keeps going wrong, email support@teamlead.io. - Do you only see login with email and password? Use your organisation's link and create the bookmark again, as described above. ### See also - [Logging in to Teamlead](https://kennisbank.teamlead.io/en/logging-in-to-teamlead?hsLang=en) - [Managing accounts: rights, inviting, deactivating and deleting](https://kennisbank.teamlead.io/en/managing-accounts-rights-inviting-deactivating-and-deleting?hsLang=en) - [I see the regular login screen instead of logging in with my organisation](https://kennisbank.teamlead.io/en/i-see-the-regular-login-screen-instead-of-logging-in-with-my-organisation?hsLang=en) - ["Access denied" when logging in with SSO](https://kennisbank.teamlead.io/en/access-denied-when-logging-in-with-sso?hsLang=en) - [Get started](https://kennisbank.teamlead.io/en/get-started?hsLang=en) - [For employees](https://kennisbank.teamlead.io/en/for-employees?hsLang=en) - [For planners and team leads](https://kennisbank.teamlead.io/en/for-planners-and-team-leads?hsLang=en#main-content) - [Schedule](https://kennisbank.teamlead.io/en/for-planners-and-team-leads?hsLang=en#schedule) - [Shift templates and automatic scheduling](https://kennisbank.teamlead.io/en/for-planners-and-team-leads?hsLang=en#shift-templates-and-automatic-scheduling) - [Leave](https://kennisbank.teamlead.io/en/for-planners-and-team-leads?hsLang=en#leave) - [Staffing and forecast](https://kennisbank.teamlead.io/en/for-planners-and-team-leads?hsLang=en#staffing-and-forecast) - [Adherence and statistics](https://kennisbank.teamlead.io/en/for-planners-and-team-leads?hsLang=en#adherence-and-statistics) - [For administrators](https://kennisbank.teamlead.io/en/for-administrators?hsLang=en) - [Connections](https://kennisbank.teamlead.io/en/connections?hsLang=en) - [Frequently asked questions](https://kennisbank.teamlead.io/en/frequently-asked-questions?hsLang=en) [![](https://kennisbank.teamlead.io/hs-fs/hubfs/Teamlead-logo.png?width=500&height=105&name=Teamlead-logo.png)](http://teamlead.io) [Website](https://teamlead.io)[Create a ticket](https://servicedesk.teamlead.nl/tickets?hsLang=en)© 2026 Teamlead