How it works
Microsoft Entra ID, previously Azure AD, lets users access Sage Sales Management with a Microsoft work account.
The integration uses OpenID Connect to authenticate users and OAuth 2.0 to authorise access to the requested resources.
Single sign-on does not automatically create or synchronise users. User synchronisation is configured separately.
Before you start
You need:
Access to Sage Sales Management Admin to configure authentication.
An active Sage Sales Management user to test access.
A Microsoft Entra administrator with sufficient permissions to manage the application and grant the required consent.
1. Configure authentication in Sage Sales Management
Open Sage Sales Management Admin.
Go to Users > Authentication.
Select Microsoft as the authentication provider.
Define which users will use this method and save the settings.
2. Start sign-in and locate the application
Open the Sage Sales Management sign-in page.
Enter the email address of a user configured to sign in with Microsoft.
Complete Microsoft sign-in.
If approval is requested, follow your organisation’s process.
The application may be added to the directory during the first consent process. An administrator may also have added it previously.
To find it, open the Microsoft Entra admin centre and go to Entra ID > Enterprise apps.
Find the Sage Sales Management application used by your organisation. Check its details and publisher before making changes.
3. Review permissions and consent
The application may request the following permissions:
openid: enables sign-in through OpenID Connect.profile: provides access to profile information.email: requests the email address, when available.User.Read: allows the application to read the signed-in user’s profile through Microsoft Graph.
Review the permissions shown in the actual request.
If your organisation allows user consent, users can accept permissions permitted by that policy.
If administrator approval is required:
Open the enterprise application.
Go to Security > Permissions.
Review the requested permissions.
Select Grant admin consent and confirm.
You do not need to enable application registration to allow this sign-in method.
4. Define who can access the application
To restrict access to specific users:
Open Properties in the enterprise application.
Set Assignment required? to Yes and save.
Open Users and groups.
Add the authorised users or groups.
Group-based assignment depends on your Microsoft Entra licence.
If assignment is not required, access remains subject to consent, Microsoft policies, and Sage Sales Management settings.
5. Apply access policies
If your organisation uses Conditional Access, apply the relevant policies to this application, according to your Microsoft licence.
These policies may require additional verification. An existing Microsoft session does not guarantee access without further checks.
6. Verify access
Test sign-in with an authorised user.
Check that they access the correct Sage Sales Management account.
If you have restricted access, also test with an unassigned user.
If an error appears, review consent, assignments, policies, and Microsoft Entra sign-in logs.