With SSO, staff log in with their company account. User roles can be assigned automatically from Entra ID groups.

Steps for your IT team

1. Create an app registration in Microsoft Entra ID.
2. Create App Roles whose values match the role names in the Lost and Found Software exactly.
3. Assign users or groups to these App Roles.
4. Enter the IDs and the client secret in the Lost and Found Software (Company Settings → Microsoft Active Directory) and test the login.

Good to know

• Role names should contain no spaces or special characters – otherwise the App Role value may not match.
• The client secret expires. Create the new secret before the old one expires and enter it in parallel, so logins keep working.
• SSO users change their password in the company account, not in the Lost and Found Software.