An admin requests the integration in Settings > Integrations > Partners > Microsoft Single Sign-on. Once your subscription is confirmed, register ManageBac+ as an app in Microsoft Entra ID, then paste the application (client) ID and directory (tenant) ID into the same ManageBac+ page. Users whose ManageBac+ email is a Microsoft account can then select Sign-in with Microsoft.
For ManageBac+ administrators setting up single sign-on (SSO) with Microsoft or Microsoft Entra ID.
Users whose ManageBac+ accounts are associated with Microsoft or Microsoft Entra ID can use SSO once the school's ManageBac+ administrator has turned it on.
Request the integration
-
Go to Settings > Integrations > Partners and select Microsoft Single Sign-on. From here you can request Login with Office 365 or Login with Microsoft Entra ID.
-
Select Request Integration, then Yes in the pop-up to confirm your school's interest. The page also shows an example of what users see when they sign in with Microsoft or Entra ID.
-
The button changes to Waiting for Integration. Your Account Manager will contact you within 1 business day to confirm. Configuration instructions are shown on the right-hand side.
Set up login with Microsoft O365 and Entra ID
Once your subscription is confirmed, set up single sign-on with Microsoft Entra ID (previously called Azure Active Directory).
Step 1: Sign in to the Microsoft Entra admin centre
Sign in to the Microsoft Entra admin centre with an account that can register applications. You can also open Microsoft Entra ID from the Azure portal.
Step 2: Register a new application
-
In the left panel, go to Entra ID > App registrations and select New registration.
Enter an Application Name, for example "ManageBac - Faria International School".
Select Multiple Entra ID tenants, Allow all tenants.
For the Redirect URI, select Web and enter https://SUBDOMAIN.managebac.com/auth/azureactivedirectory/callback. Replace SUBDOMAIN with your school's ManageBac+ domain.
Select Register.
Schools with managebac.cn domains that have trouble with the O365 SSO option need to change the redirect URL from .com to .cn.
Schools with managebac.us domains use .us in the redirect URI instead of .com.
Step 3: Turn it on in ManageBac+
-
Signed in to ManageBac+ as an administrator, go to Settings > Integrations > Partners > Microsoft Single Sign-On and select Edit.
-
From the app's Overview page, copy the Application (client) ID and Directory (tenant) ID into the matching fields in ManageBac+.
Select Save Changes.
Step 4: Turn on access tokens and ID tokens in Entra ID
Make sure both Access Tokens and ID Tokens are enabled.
Step 5: Turn on SSO for the mobile apps
iOS and macOS apps
-
In the app's left panel, select Authentication (Preview), then Add Redirect URL and choose iOS / macOS.
Enter
co.faria.mobilemanagebacas the Bundle ID, select Configure and then Done.
Android apps
-
In Authentication (Preview), select Add Redirect URL and choose Android.
Enter
co.faria.mobileManageBacas the Package name andzSYcr+Jl98M38cUv7Kq7kzsN38A=as the Signature hash. Select Configure and then Done.
Step 6: Sign in
Users whose ManageBac+ email is a Microsoft or Entra ID account can now select Sign-in with Microsoft on your school's ManageBac+ page.
Frequently asked questions
Will signing out of ManageBac+ sign me out of Microsoft?
No. Signing out of ManageBac+ does not sign you out of your Microsoft account, so we recommend using SSO on your own computer. On a shared computer, sign out of Microsoft completely before you leave.
Does turning on Login with Microsoft create accounts or change users' emails?
No. It lets users whose ManageBac+ account is already associated with Microsoft sign in with SSO.
If a student changes their Microsoft password, how long until SSO picks it up?
SSO does not need to sync passwords.
Does the Microsoft account have to come from the school?
For Entra ID, only users from the specified Microsoft tenant can sign in. For Microsoft alone, any Microsoft account can sign in with SSO as long as the email already exists on ManageBac+.
Related to