When a user is logging into SimScale they will automatically be guided once they choose to log in either via Google or Microsoft (this is sometimes also called Two Factor Authentication). The user needs to click on either ‘Sign in with Google’ or ‘Sign in with Microsoft’ and authenticate.
If a user signs in with an SSO provider and an account with the same email already exists, the system automatically links them in the background, ensuring seamless access without creating duplicate accounts.
Disable Password Login
As an organization admin, one can enable/disable SSO login for its users under organization-settings> Acces Preferences> Single sign on.
Microsoft SSO Setup
SimScale uses OpenID Connect (OIDC) with Microsoft Entra ID (formerly Azure Active Directory) and is registered as a multi-tenant application. This means that any Entra ID tenant can authenticate without per-tenant configuration on SimScale’s side. No federation setup, Entity ID, or Redirect URL configuration is needed on your side.
For some corporate organizations, when using Microsoft Single Sign-On (SSO) for the first time, users may receive an error code AADSTS65001, indicating that admin consent is missing for the SimScale application.
In these cases, an Entra ID administrator from the user’s organization must approve the Software application within Microsoft Entra ID. This approval allows the application to access the necessary permissions to authenticate users via SSO.
To complete this step, the admin should review and approve the consent request for the application. Detailed instructions on how to do this can be found in the official Microsoft documentation.
