Microsoft sign-in for IT admins
AutoMEP's "Continue with Microsoft" button works with any Microsoft Entra ID work or school account, and with personal Microsoft accounts. It uses OpenID Connect on the Microsoft identity platform, and the app is published by a verified publisher.
What it asks for. The standard sign-in scopes
Approving it for everyone. If your tenant lets users consent to apps, people can sign in straight away. If it doesn't, an administrator can approve AutoMEP once for the whole organization. Have someone with the Cloud Application Administrator role sign in to AutoMEP with Microsoft and tick "Consent on behalf of your organization", or open Enterprise applications in the Microsoft Entra admin center, find AutoMEP, go to Permissions and choose "Grant admin consent".
Limiting who can sign in. In Enterprise applications, open AutoMEP, set "Assignment required" to Yes under Properties, then add the people or groups who should have access under Users and groups. Anyone not assigned is refused by Microsoft before they reach AutoMEP. Your Conditional Access policies, such as requiring MFA, apply to this sign-in like any other.
When someone leaves. Disabling or removing their account in Entra ID stops their Microsoft sign-in at once. If that person also set an AutoMEP password with Reset password, they could still sign in with their email address, so use the form on this page to ask us to close that AutoMEP account.
AutoMEP doesn't offer SAML sign-in or automatic user provisioning (SCIM). People join by signing in, and each person's projects stay in their own account.
What it asks for. The standard sign-in scopes
openid, email and profile, plus one delegated Microsoft Graph permission, User.Read. Together they let AutoMEP sign the person in and read their own name and email address so it can find or create their AutoMEP account. It cannot read mail, files, calendars or anyone else's profile, and it has no application permissions.Approving it for everyone. If your tenant lets users consent to apps, people can sign in straight away. If it doesn't, an administrator can approve AutoMEP once for the whole organization. Have someone with the Cloud Application Administrator role sign in to AutoMEP with Microsoft and tick "Consent on behalf of your organization", or open Enterprise applications in the Microsoft Entra admin center, find AutoMEP, go to Permissions and choose "Grant admin consent".
Limiting who can sign in. In Enterprise applications, open AutoMEP, set "Assignment required" to Yes under Properties, then add the people or groups who should have access under Users and groups. Anyone not assigned is refused by Microsoft before they reach AutoMEP. Your Conditional Access policies, such as requiring MFA, apply to this sign-in like any other.
When someone leaves. Disabling or removing their account in Entra ID stops their Microsoft sign-in at once. If that person also set an AutoMEP password with Reset password, they could still sign in with their email address, so use the form on this page to ask us to close that AutoMEP account.
AutoMEP doesn't offer SAML sign-in or automatic user provisioning (SCIM). People join by signing in, and each person's projects stay in their own account.
More in Getting Started
Did this answer your question? If not, contact support and send us the drawing.