How to enable SSO on your Go1 platform using Microsoft Entra ID
This guide sets up Go1's native Microsoft Entra single sign-on connection. It uses OpenID Connect (OIDC), an identity layer built on OAuth 2.0, rather than SAML. For most Microsoft Entra customers, this is the recommended connection because it is simpler to set up and does not require manual SAML claim mapping.
Microsoft Entra's SSO seamlessly signs users in when they are on corporate devices connected to a corporate network. When enabled, users will not need to enter in their passwords, or in most cases their username, to sign in to Go1.
Profile fields synced automatically
When a user signs in, Go1 automatically syncs these fields when values are available in Microsoft Entra:
Attribute | Go1 field | Entra Field |
Given Name |
|
|
Familiy Name |
|
|
|
| |
Job title |
|
|
Department |
|
|
Locale |
|
|
All other Go1 standard user account fields are unavailable by default. We are considering an enhancement that would let you map additional Go1 standard fields and choose which fields to send to Go1.
This also applies to existing native Microsoft Entra connections. You do not need to delete or recreate the connection. Updated values are synced when the user signs in.
IMPORTANT: To enable single sign on with Entra for Go1, you need to have the Application administrator access to your organisation's Microsoft account. If you don't, you will need to ask someone with the Application administrator role to complete the connection (check with your IT Team to find out who this is).
To get started, this Application administer will sign in to Go1, navigate to their initials at the top-right of the page and select Integrations.
Locate Microsoft Azure from the list of Add-ons and move the toggle from ‘Off’ to ‘On’ - ensure from the modal the setting has saved.
This will enable the Microsoft 365 tab on the left-hand side of the page. You may need to refresh your page for the new page to populate.
Select the tab and click ‘Connect with Microsoft’. You will then be direct to your Microsoft Entra login page where you'll enter your user name and password.
Please note: If you are not an Application administrator for your organisation's Microsoft account, you will see this screen. Your Application administrator can click the first link to complete the connection.
You will then be shown this permissions screen, you will need to accept these permissions to complete the SSO set up.
Go1 automatically creates an Enterprise application in your Microsoft Entra tenant to manage this SSO connection. Once the connection is established, authorized users can access Go1 by choosing the Microsoft sign-in option and completing Microsoft's login flow with their own account details.
Final configurations
Once your connection is successfully configured and tested you may also choose to enable/disable two additional settings that can be found under the Go1 platform Settings page.
To find these, go to your avatar in the top right-hand corner > choose Settings > choose Configuration from the left-hand menu > under Enabled Applications you will see the following:
Hide login with email option
This makes SSO the only option to access your Go1 platform and auto-redirects users to SSO login.
Disallow Register via SSO
Go1 enables just-in-time provisioning by default on all SSO connections, this can be disabled here.