When this option is used, users will be automatically created in SafeSend and will let them sign in using their Office 365 credentials.

• Approval is not required.
• Users automatically added will only have the Staff user group.

Obtain Microsoft Office 365 Group ID

• A system administrator must create a group in Azure and add the ID to the Product Settings before registering and adding the enterprise application.
• If a user belongs to multiple AD Groups, they’ll need to approve access when signing in for the 1st time.

1. Sign in to the Azure Portal.
2. Go to Active Directory to open the Domain Overview page.
3. Select Groups.
4. Enter the name of the group you are looking for in the Search Groups field.
5. Copy the Group ID (Object ID) from the Object ID column.

Register for the SafeSend Suite Enterprise Application

A system administrator will need to add SafeSend as an Enterprise Application before they’ll have access to add user groups.

1. Search for Enterprise applications from the Azure Portals Global Search field.
2. Once the application is opened, select + New Application. This will take you to the Microsoft Entra Gallery.
3. Search for SafeSend Suite SSO and select on the application to continue the registration.
4. Select Sign up for SafeSend Suite SSO
5. The SafeSend site will open, and here you will select Continue with Office 365.
6. A consent screen will open. Select Accept.
   • Administrators can select Consent on behalf of your organization
     • If this is not selected, the consent will only apply to the logged-in user.
     • All remaining users that sign in will have to Accept when they sign in using Continue with Office 365.

Add Users/Groups to the Enterprise Application

A user group must be already created to complete the following steps.

1. Go to Enterprise applications.
2. Search for SafeSend Returns.
3. Select +Add User/Groups.
4. Select None Selected from left-hand side.
5. Select the groups to add to SafeSend, then Select.
6. The next screen will show all the groups selected. Select Assign.

If you have any trouble accessing Azure Portal or obtaining your Group ID, contact Microsoft® Azure Support.

If you receive the following error, upgrade your Microsoft® subscription to a plan that includes Groups, or use the User List option in SafeSend: Please add Azure Group ID(s) to enable O365.

The SSR user list lets existing users sign in using their Microsoft® Office 365 credentials.

• The user will need to appear in the Azure Tenants and SafeSend for a successful sign in.
• No approval is needed.

This option lets you add your Azure Tenant ID in which all users corresponding to that ID can sign in using their Office 365 credentials.

• If the user is already added as a user in SafeSend, no approval is needed for access.
• If the user is NOT already a user in SafeSend, approval is required for the user to access.

Approve or Deny New Users

The approval (or denial) can be done via email or in SafeSend. This is a one-time approval.

Email

• The firm admin will receive an email that a new user is requesting access via Microsoft® Office 365.
  • They’ll have the ability to Approve or Deny those permissions from that email request.

SSR App

1. Go to Account Management.
2. Select User Permissions.
3. Select Grant Access or Deny for each user.