Troubleshooting Microsoft single-sign-on
Overview
This troubleshooting guide covers common questions and issues you may encounter when using Microsoft as your sign-in authentication method.
NOTE: Microsoft single-sign-on (SSO) is only available on Enterprise plans.
Login URL
When logging into Ortto, ensure you access from https://ortto.app/login.
Using a different link or a link containing additional parameters, such as UTM tag,s may interrupt or prevent the login process.
Changing app authentication after setting Microsoft
Once Microsoft SSO has been enabled, users cannot switch authentication methods directly within the app.
If you need to regain access to change your authentication method, please contact our Support team. We will need to verify additional security details and assist further.
Microsoft login loop
A login loop may occur for several reasons. Common reasons iclude:
- At the end of the OAuth process, when we get data from Microsoft we receive an empty email. An email is required to complete the login process. This could be related to a permission issue, so previous customers have resolved it by logging into the Azure portal and grant the app access under the permission tab for the app in Azure. You may require assistance from your Microsoft admin or Microsoft support.
- Ensure the user's email address has been added as a user and exists within your Ortto account.
- The email on the Ortto user profile must match the Microsoft account email exactly.
- You may need to log in with the normal email and password option once to bind the Microsoft account to your Ortto account. If there is no identification match, you may receive an ssotoken parameter in the URL query in your browser's address string.
Binding the Microsoft account to an existing Ortto account
Follow these steps to correctly bind your Microsoft login to your existing Ortto user:
- Log out of Ortto.
- Go to our login page: https://ortto.app/login
- Select Sign in with Microsoft.
- If we detect a matching Microsoft email in Ortto, you will be redirected back to the login screen. You will see an sstoken query parameter in the browser's address bar.
- On the redirected login screen, enter your existing Ortto username and password. This will associate your Microsoft account with your Ortto login.
After completing these steps, you should be able to sign in using Microsoft SSO once bound.
NOTE: If Microsoft SSO is enforced for your account, users must continue logging in using Sign in with Microsoft going forward.