Skip to main content
Print

Microsoft Entra ID SSO FAQs

Find concise answers to common questions about Microsoft Entra ID SSO for LocoDELEGATIONS.

Microsoft Entra ID SSO FAQs

Contact support@locosoft.co.nz. Agree on a secure method before transferring a client-secret value.

The council should select an expiry period that complies with its own security policy. Record the expiry date and coordinate renewal with LocoSOFT before it expires.

Set "groupMembershipClaims": "SecurityGroup" in the app registration manifest. This allows LocoDELEGATIONS to read the user’s security-group memberships during SSO authentication.

No. Group memberships are used for authorisation and role checking; the groups themselves are not provisioned into the application.

Yes. The council can assign selected users or groups to the Microsoft Entra enterprise application and require assignment for access. LocoDELEGATIONS also checks nominated security-group memberships for application roles.

No. SCIM provisioning is not currently supported.

Yes. When an authorised user signs in through SSO for the first time, LocoDELEGATIONS automatically creates their account if it does not already exist.

Table of Contents