Single Sign-On (SSO) for Intranet Access Works with Active Directory or Entra ID

SSO makes it easy for staff to access your intranet without entering another password. SimplifyIT supports both domain-joined Active Directory environments and Microsoft Entra ID (formerly Azure AD), so you can choose the best fit for your infrastructure.

Option 1: Active Directory (Domain-Joined)

Users must be logged into a domain-joined workstation
Intranet runs on Windows Server (IIS) and reads Windows authentication context
No passwords stored - uses built-in identity
Compatible with Integrated Windows Authentication

Option 2: Entra ID (Azure AD)

Redirects users to Microsoft login page
Supports multi-factor authentication and conditional access
No domain join required - great for hybrid or cloud-first orgs
Integrates with Entra enterprise applications and OAuth2 flows
Fully supported in our role-based access controls

Other Supported Scenarios

Mixed authentication - AD for internal users, Entra for external or branch staff
Fallback login with intranet-only credentials (if desired)
Full audit trail of manual logins

Benefits of Intranet SSO

No password fatigue or forgotten login pages
Improved compliance with fewer attack surfaces
Simplified onboarding and offboarding
Instant permission sync from AD or Entra

Common Questions

Do you set up SSO for us?

Yes. We handle all SSO configuration - whether you're using local Active Directory or Microsoft Entra ID. There's nothing extra to install or configure on your end.

Can we use both AD and Entra at once?

Yes. Many clients use domain login for on-site staff and Entra for remote, branch, or hybrid users.

What happens if a user doesn't have AD or Entra access?

You can enable fallback intranet credentials for select users (like vendors or part-time staff). Those logins are still tracked and permissions-controlled.

Does this integrate with MFA?

If you're using Entra ID, it automatically respects your organization's MFA settings - including conditional access and risk-based policies. You can also enable manual MFA for manual logins.