Single Sign On for Office 365

While the allure of reduced costs and increased productivity is driving Office 365 adoption among organizations, it is not all bliss for IT admins and end users. With the addition of Office 365, end users have to deal with yet another username and password, which results in IT help desks being bombarded with even more password reset tickets. Wouldn’t it be great if there was a solution to reduce the burden of remembering passwords and provide end users with seamless, consistent access to all cloud applications, including Office 365?

ADSelfService Plus provides secure single sign-on (SSO) for Office 365 by connecting your your on-premises Active Directory (AD) with Office 365 and other SAML-enabled applications. When users go to log in to Office 365, ADSelfService Plus authenticates using their Windows Active Directory domain credentials to sign them in automatically—no need to re-enter their username or password.

ADSelfService Plus also supports Active Directory-based secure SSO for hundreds of other SAML-enabled cloud-based applications.

With Office 365 single sign on from ADSelfService Plus, users need not remember two different, complex passwords for their Active Directory and Office 365 accounts. All they have to do is simply log in to ADSelfService Plus once with their Windows domain credentials and they will be automatically granted access to Office 365 and any other supported cloud apps.

Setting up single sign on for Office 365

Setting up Active Directory-based Office 365 SSO logins via Microsoft's Active Directory Federation Services (ADFS) and Azure AD Connect (formerly DirSync) is complicated. With ADSelfService Plus, you can connect AD with Office 365 and set up SSO within minutes. ADSelfService Plus uses the secure and widely-adopted industry standard Security Assertion Markup Language 2.0 (SAML 2.0), which allows you to utilize the identities in your existing Active Directory infrastructure for SSO.

Office 365 access control based on OUs and groups.

Granularly control who has access to Office 365 based on OUs and groups in Active Directory. You can create multiple security policies in ADSelfService Plus to ensure that only the intended users have access to Office 365 and its business-critical services.

Two-factor authentication for Office 365

Add an extra layer of protection for Office 365 users by enabling two-factor authentication. In addition to Windows credentials, users logging in to ADSelfService Plus for Office 365 SSO can be required to go through a second authentication factor, such as verification codes (sent to users’ mobile number or email address stored in Active Directory), Duo Security, RSA SecurID, or Google Authenticator.