Skip to main content

Solutions

Law firms

Tax, audit & accounting firms

Corporations

Governments

Products

Legal

Trade & supply

Tax, audit & accounting

Corporate tax

Risk & fraud

Books

Recommended products

Questions? We are here to help.
Contact us

Purchase

Buy solutions

Buy books

Contact sales

Questions? We are here to help.

Resources

Insights

Events

Product training

Product communities

Developers

Reports

Single sign-on (SSO)

Set up Microsoft Office 365 single sign-on so users can access SafeSend with existing credentials and administrators can manage access.
Show all hidden content.
Single sign-on makes logging into SafeSend fast, easy, and secure. Users can sign in by selecting the
Continue with Office 365
 button on the sign in page.
note
Single sign-on is currently only available for Microsoft Office 365.
Enable Single Sign-On In SafeSend
An administrator on the account must turn on single sign-on in SafeSend.
  1. Go to the
    Product Settings
    .
  2. Select
    Security
    .
  3. Select the
    Gear
     icon under the
    Single Sign-On
     section.
  4. Select one of the 3 options:
    Azure Ad Group(s)
    ,
    SSR Users List
    , or
    Azure
    Tenant ID
    .
  5. Enter
    Group ID
     or
    Tenant ID
     if necessary.
    note
    Refer to the following for more information on user sign-in based on the selected setting.
  6. Select
    Add
    .
  7. The
    O365
     switch button will be turned to
    On
    .
Signing in
note
Depending on the Azure company settings, you may receive a permissions pop-up after the 1st sign-in to SafeSend.
  • Azure Administrator can mark the
    Consent on behalf of your Organization
     checkbox to let other users bypass this screen.
Azure Ad Groups
When this option is used, users will be automatically created in SafeSend and will let them sign in using their Office 365 credentials.
  • Approval is not required.
  • Users automatically added will only have the Staff user group.
Obtain Microsoft Office 365 Group ID
note
  • A system administrator must create a group in Azure and add the ID to the Product Settings before registering and adding the enterprise application.
  • If a user belongs to multiple AD Groups, they’ll need to approve access when signing in for the 1st time.
  1. Sign in to the Azure Portal.
  2. Go to
    Active Directory
     to open the
    Domain Overview
     page.
  3. Select
    Groups
    .
  4. Enter the name of the group you are looking for in the
    Search Groups
     field.
  5. Copy the
    Group ID (Object ID)
     from the
    Object ID
     column.
Register for the SafeSend Suite Enterprise Application
A system administrator will need to add SafeSend as an Enterprise Application before they’ll have access to add user groups.
  1. Search for
    Enterprise applications
     from the
    Azure Portals Global Search
     field.
  2. Once the application is opened, select
    + New Application
    . This will take you to the Microsoft Entra Gallery.
  3. Search for
    SafeSend Suite SSO
     and select on the application to continue the registration.
  4. Select
    Sign up for SafeSend Suite SSO
  5. The SafeSend site will open, and here you will select
    Continue with Office 365
    .
  6. A consent screen will open. Select
    Accept
    .
    • Administrators can select
      Consent on behalf of your organization
      • If this is not selected, the consent will only apply to the logged-in user.
      • All remaining users that sign in will have to
        Accept
         when they sign in using
        Continue with Office 365
        .
Add Users/Groups to the Enterprise Application
note
A user group must be already created to complete the following steps.
  1. Go to
    Enterprise applications
    .
  2. Search for
    SafeSend Returns
    .
  3. Select
    +Add User/Groups
    .
  4. Select
    None Selected
     from left-hand side.
  5. Select the groups to add to SafeSend, then
    Select
    .
  6. The next screen will show all the groups selected. Select
    Assign
    .
If you have any trouble accessing Azure Portal or obtaining your Group ID, contact Microsoft® Azure Support.
If you receive the following error, upgrade your Microsoft® subscription to a plan that includes Groups, or use the
User List
 option in SafeSend:
Please add Azure Group ID(s) to enable O365
.
User List
The SSR user list lets existing users sign in using their Microsoft® Office 365 credentials.
  • The user will need to appear in the Azure Tenants and SafeSend for a successful sign in.
  • No approval is needed.
Azure Tenant ID
This option lets you add your Azure Tenant ID in which all users corresponding to that ID can sign in using their Office 365 credentials.
  • If the user is already added as a user in SafeSend, no approval is needed for access.
  • If the user is NOT already a user in SafeSend, approval is required for the user to access.
Approve or Deny New Users
The approval (or denial) can be done via email or in SafeSend. This is a one-time approval.
Email
  • The firm admin will receive an email that a new user is requesting access via Microsoft® Office 365.
    • They’ll have the ability to Approve or Deny those permissions from that email request.
SSR App
  1. Go to
    Account Management.
  2. Select
    User Permissions
    .
  3. Select
    Grant Access
     or
    Deny
     for each user.
Revoke SSO (Single Sign-On) Access
SSO can also be revoked after the user has been given access:
  1. Go to
    User Management
    .
  2. Find the
    User
     you want to revoke access to, then select the
    Action(...)
     menu.
  3. Select
    Revoke Office 365
    .
  4. You can choose to revoke access
    Temporarily
     or
    Permanently
     by selecting the respective option.
    • Temporarily
      : The user will lose the ability to sign in via SSO but can request SSO access again. The system admin will have to admit them.
    • Permanently
      : The user will lose the ability to sign in via SSO but can't request access again. To reinstate SSO access, the system admin will have to edit the specific user in
      User Management
      .
  5. Select
    Apply Changes
    .

This article applies to:

  • Product: safesend
  • Subject: Setup
  • Audiences: Staff