mc Cloud
English German
English German

Signing in with Microsoft

Last modified:

To allow all of your organization’s users to use their Microsoft credentials to sign in to mc Cloud, you must purchase mc Cloud’s MS Entra feature. This incurs costs in accordance with the feature agreements. To set up the feature for you, we we need your organization’s Microsoft Entra tenant ID.

Enable signing in with Microsoft for your users

Prerequisites

Steps

  1. Send your request to purchase the paid MS Entra feature to sales-eu@meteocontrol.com. The request contains:

    • Your organization’s MS Entra tenant ID

    • An indication of whether all or only certain users should be able to sign in with Microsoft. If the latter, include a list of those users.

  2. Your meteocontrol sales agent sends you a feature agreement.

  3. You sign the feature agreement and send it back to your meteocontrol sales agent.

  4. meteocontrol connects the tenant ID to your organization in mc Cloud.

Now, the respective users can link their Microsoft account to mc Cloud when signing in to use it in the future. All their MS Entra settings are applied to the meteocontrol applications. See also Sign in to your account.

Notes

  • For all your organization’s future users the MS Entra feature is also enabled.

  • If the MS Entra feature is enabled for a user, they can no longer sign in with their regular mc Cloud password.

FAQs

Which authentication protocol does mc Cloud use?

mc Cloud uses OpenID Connect (OIDC) for authentication.

How is mc Cloud connected to your Microsoft Entra tenant?

mc Cloud is integrated as a Microsoft Entra enterprise application using the admin consent process. Once a Microsoft Entra administrator has granted tenant-wide consent, the integration is configured in your Microsoft Entra tenant.

Does granting admin consent automatically enable SSO/Single sign-on for every user in the tenant?

No. Admin consent authorizes the integration between Microsoft Entra and mc Cloud. Individual users must still be assigned to the mc Cloud enterprise application in Microsoft Entra and created in mc Cloud.

Does assigning mc Cloud in Microsoft Entra automatically give a user access to mc Cloud?

No. Assigning a user to the mc Cloud enterprise application in Microsoft Entra is only one part of the setup. The user must also be created in mc Cloud, and they must complete the account activation process.

What happens if a user exists in Microsoft Entra but not in mc Cloud?

The user can not authenticate through Microsoft Entra SSO until an mc Cloud administrator creates an account for them in mc Cloud and the user completes the account activation process.

What happens if a user exists in mc Cloud but is not assigned to the Enterprise Application in MS Entra?

The user can not authenticate through Microsoft Entra SSO until an Microsoft Entra administrator assigns the mc Cloud enterprise application to them in the Microsoft Entra tenant.

Are users created automatically when they sign in to mc Cloud for the first time (JIT/Just-in-time provisioning)?

No. JIT provisioning is not currently supported. Users must be created in mc Cloud before they can sign in through Microsoft Entra SSO.

Is automated user provisioning through SCIM (System for cross-domain identity management) supported?

SCIM provisioning is not currently available. However, we are testing SCIM functionality internally to simplify automated user provisioning in the future.

Can users be automatically removed or deactivated in mc Cloud when they are removed from Microsoft Entra?

Automated synchronization of user lifecycle changes is currently not supported. User administration must therefore also be performed in mc Cloud. SCIM functionality, which could automate parts of this process in the future, is currently being tested internally.