Single Sign-On (SSO)
Updated
Single Sign-On (SSO) allows users to sign in to Insight using their Microsoft account. This means authentication is managed through Microsoft, allowing you to control security settings within your Microsoft environment and removing the need for users to maintain a separate Insight password.
Once SSO is enabled, a Log in with Microsoft button will appear on the user log in page. If a user's Microsoft email address matches an existing Insight account, they can sign in using Microsoft without any additional configuration.
Require Single Sign-On for your account
Once the feature is enabled for your school or trust, a new Single Sign-On section will be available in Admin, in the Users section.
To require all users to sign in using SSO, an administrator can enable this setting via Admin > Single Sign-On (SSO).
When enabled at Trust level, the setting is automatically applied to all schools within the Trust and cannot be overridden by individual schools.
Account Provisioning
Insight does not currently support automatic user provisioning (for example, via Microsoft Entra ID). Users must first be added to the School or Trust and assigned an appropriate role before they can sign in.
