

Single sign-on options is a tab on the Administration settings screen. Easy Projects supports Microsoft Azure's Single Sign-On (SSO) using Azure Active Directory (AD). With this feature you can log in to Easy Projects via the authentication endpoint in Azure ID. To learn more about SSO and Azure AD, click here.
Single Sign-on Protocol Flow
- Precondition 1: A user exists in Easy Projects with the same email as a user registered in the Azure Active Directory. On how to use the option of auto-propagating Easy Projects users at their first login to Easy Projects, see below.
Precondition 2: Single sign-on is enabled in Easy Projects. See below on how to enable SSO in Easy Projects.
- The user tries to access an Easy Projects page, e.g. Time Logs.
- The user is automatically redirected to the Azure Active Directory authentication endpoint.
- After successful sign-in, the user is redirected to Easy Projects and taken directly to the required page.
Enabling SSO
To enable single sign-on in Easy Projects:
- Go to User Menu | Settings | General | Single sign-on options tab.
- Click 'Enable single sign-on'.
- Click 'Apply' at the bottom of the page.
SSO type
Two SSO services are supported:
- Azure AD, and
- SAML
The Azure AD login is handled by cookies, so you simply login to one Azure AD site, in your network, and you'll be auto-logged in to all the other registered sites.
For SAML you will need either a url to the metadata or provide the metadata as an upload or paste the info.
To get the url you will follow steps similar to the steps, below
- Open the ADFS Management on the ADFS server.
- Go to Relying Party Trusts and select the target partner.
- Click Properties...
- Click the Identifiers tab and copy the Relying party identifier.
- Using a browser, log in to the web interface of the ADFS server that is provided by Internet Information Services (IIS).
For example, go to the following URL: https://<host>:<port>/adfs/ls/IdpInitiatedSignOn.aspx?loginToRp=<partnerUrl>, where <partnerUrl> is the value of the Relying party identifier that you copied in the previous step.
Alternatively, you can export the metadata and upload or paste the info - tell EP which mode you want to do this - see this screenshot from the sso section of the Advanced company settings
Session management
Setting | Sub-Setting | Description |
Require sign-in at the start of each session | This option requires that you sign in at the beginning of each session. | |
Use single sign-on as the default authentication method | This sets single sign-on as the default authentication method. | |
Customize SSO login button text | Textbox | This customizes the SSO button you see on the login page. Maximum length is 30 characters. |
User provisioning
If you’d like Easy Projects to automatically create accounts for anyone who has access via Azure SSO at their first login to Easy Projects, use the following steps:
- Go to User Menu | Settings | General | Single sign-on options tab.
- With the 'Enable single sign-on' selected, select 'Create users based on SSO automatically.'
- Select a default role for the auto-propagated users from the dropdown list.
- Specify the email domain to be used with the SSO-provsioned users.
- Click 'Apply' at the bottom of the page.

As a result, a user with the same name and email as the matching Azure AD user will be created in Easy Projects.