Skip to main content
Microsoft sign-in lets invited users authenticate with their organization’s Microsoft account. Novaplan AI normally prepares the workspace and coordinates identity-provider changes with your Microsoft Entra administrator.

​
Register the application

  1. In the Microsoft Entra admin center, open App registrations and create or select the application approved for Novaplan AI. Choose the supported account type your organization intends to allow.
  2. In Novaplan AI, an authorized administrator opens Workspace Settings → Authentication → Microsoft and copies the displayed Redirect URI.
  3. In the Microsoft application registration, add that exact address as a Single-page application redirect URI. The accessible Novaplan AI sign-in flow exchanges the authorization code in the browser with PKCE; Microsoft’s redirect URI guide describes the SPA platform choice. Use the deployed workspace’s HTTPS address rather than an example URL.
  4. Copy the Application (client) ID and Directory (tenant) ID from the registration into the Novaplan AI Microsoft settings and save. The current workspace form does not ask for a client secret.
The accessible configuration supports just-in-time (JIT) user creation and defaults it to enabled. For a workspace where Novaplan creates accounts and invites users, confirm that JIT is disabled before enabling Microsoft sign-in. Test with an invited account and an uninvited test account. Confirm the actual switch and behavior in the deployed Enterprise workspace.

​
Check sign-in

Ask an invited test user to select Sign in with Microsoft. If the flow fails, check the exact Redirect URI, client and tenant IDs, account-type choice, Microsoft app assignment or consent, and the email address on the invitation. Keep a working administrator sign-in method during the change. For account-access help, contact your workspace administrator or Novaplan AI support.