Setting up the Microsoft 365 login

Setting up the Microsoft 365 login

Diggspace comes with a Microsoft 365 authentication provider out of the box.
To start logging in with your Microsoft 365 account, follow the steps below:
Info
The steps below have to be executed by a Diggspace user with the Global Admin role, and an Entra ID Global Admin.
  1. Open User Management from the User Menu
  2. Go to the Authentication tab
  3. In the authentication provider list, expand the Microsoft 365 panel
  4. Click on Give Admin Consent
  5. A Microsoft popup will open up, asking you to log in with a Microsoft 365 account. Make sure to log in with an account that has Global Admin permissions in Entra ID.
  6. Microsoft will list the permissions you need to give to Diggspace. Accept these and make sure to consent on behalf of your organization.
From now on, users within your Entra ID will be able to log in with their Microsoft 365 accounts.

Setting up Microsoft 365 daily user sync

To set up the synchronization process that runs once a day, all you have to do is:
  1. Follow steps 1 through 3 above
  2. Click on Refresh tenant initial domain. This will automatically get your tenant initial domain.
There are two additional settings that you can choose from:
  1. Remove users on daily Microsoft 365 sync - this lets you automatically remove users as they are removed from your Entra ID
  2. Remove Microsoft 365 disabled users - this automatically removes users as they are disabled from your Entra ID
Idea
We have a more advanced syncing mechanism called SCIM, which you can configure for near real time synchronization with your Entra ID. Find out more on our article Configure SCIM for user syncing with Microsoft Entra ID.
To grant consent for the specific Microsoft 365 features that you have enabled, particularly the Microsoft 365 search or the Microsoft 365 dashboard, follow these steps:
  1. Open Global Settings from the User Menu
  2. Go into the Microsoft 365 tab
  3. Choose which features you would like to use
  4. At the bottom of the page, click Grant admin consent for selected features
  5. A Microsoft 365 login window will pop up. Login with an Entra ID Global Admin account, select consent on behalf of your organization, and grant consent to the Diggspace app.

Restricting Microsoft 365 access to the portal

The final setting that you can change here is the Restricted Tenants setting. This will restrict the log in for users from the configured tenants.
To set this up, you have two options:
  1. If your account is in the tenant you want to add, simply click Add my tenant. This will automatically get your Entra tenant ID and add it to the setting.
  2. If you need to add a specific tenant, click Add Tenant and input the Entra tenant ID.
Idea
For more control, check out our article on how to configure which Entra ID users have access to Diggspace.