--- title: EmmaCMS – Single Sign-On (SSO) and User Access description: Learn about Single Sign-On (SSO) in EmmaCMS, including Microsoft Entra ID, supported authentication methods, MFA, user provisioning and access management. --- [Skip to content](https://hub.emmasys.com/help-center/emmacms-single-sign-on-sso-and-user-access#main-content) English Show submenu for translations [Ask our support](https://hub.emmasys.com/help-center/kb-tickets/new?hsLang=en) ![emma logo santa hat (4)](https://hub.emmasys.com/hs-fs/hubfs/emma%20logo%20santa%20hat%20(4).png?width=300&height=100&name=emma%20logo%20santa%20hat%20(4).png) - [Help Center](https://hub.emmasys.com/help-center) - [Customer Portal](https://hub.emmasys.com/customer-portal) - [Website](https://emmasys.com/) - [Status Page](https://hub.emmasys.com/help-center/system-status) Open main navigation Close main navigation - [Help Center](https://hub.emmasys.com/help-center) - [Customer Portal](https://hub.emmasys.com/customer-portal) - [Website](https://emmasys.com/) - [Status Page](https://hub.emmasys.com/help-center/system-status) - English Show submenu for translations - [Ask our support](https://hub.emmasys.com/help-center/kb-tickets/new) - Contact us Contact us How can we help you? - There are no suggestions because the search field is empty. 1. [Help Center](https://hub.emmasys.com/help-center?hsLang=en) 2. [Emma CMS General](https://hub.emmasys.com/help-center/emma-cms-general?hsLang=en) October 13, 2026 # EmmaCMS – Single Sign-On (SSO) and User Access ## This guide explains the supported authentication methods, security requirements, user provisioning and onboarding process for IT administrators and organisations using EmmaCMS. EmmaCMS supports **Single Sign-On (SSO)**, allowing users to access our Microsoft Azure-hosted environment using their existing company credentials. EmmaCMS is accessed through the Microsoft Windows App using Azure Virtual Desktop. Our standard sign-in solution uses **Microsoft Entra ID** (formerly Azure Active Directory). User setup and access permissions are currently managed manually by EMMA. ### Other identity providers: We also support SAML-based sign-in integrations, including Keycloak, subject to a technical review. If your organisation uses another identity provider, contact EMMA to discuss your existing setup and the required configuration with your IT team. These integrations are assessed individually and are outside our standard Entra-to-Entra onboarding process. ### What we support: | Capability | Current support | | --- | --- | | Microsoft Entra ID work accounts | Supported through Microsoft Entra B2B collaboration, subject to onboarding and compatible security policies. | | Single Sign-On (SSO) | Supported through the configured Azure Virtual Desktop sign-in process. | | Existing company credentials | Users authenticate through their own organisation. No separate EMMA password is required for standard Entra B2B access. | | Multi-Factor Authentication (MFA) | Your organisation's MFA can be accepted when cross-tenant trust is configured and EMMA's security requirements are met. | | SAML-based sign-in, including Keycloak | Subject to technical review and agreement on the required configuration. | | Other identity providers | Require technical assessment before compatibility can be confirmed. | | User invitations and permissions | Currently managed manually by EMMA. | | SCIM provisioning | Not currently supported. Planned for future development. | | Automatic user, group and permission synchronisation | Not currently supported. Planned for future development. | | Automatic removal of EMMA access assignments | Not currently supported. Customers must request removal. | ### How sign-in works For our standard Microsoft Entra ID setup, EMMA invites approved users into our Microsoft Entra tenant as **B2B guest users**. This allows users to access EmmaCMS using their existing company accounts while their organisation continues to manage their credentials and authentication policies. No separate SAML or OpenID Connect (OIDC) integration is required for the standard Entra-to-Entra setup. However, cross-tenant access and security settings may require configuration. For SAML-based integrations, including Keycloak, the sign-in process and configuration are agreed during the technical review. Microsoft requires SSO to be enabled for external users connecting to Azure Virtual Desktop. For more information, see [Microsoft's external-user setup guidance](https://learn.microsoft.com/en-us/azure/virtual-desktop/provide-access-external-identities). MFA and security policies For the standard Entra ID setup, your organisation manages user credentials and MFA settings. EMMA controls access to the hosted environment. MFA completed within your organisation can be accepted when the appropriate cross-tenant trust settings are configured. Depending on the security policies applied, users may still receive additional authentication or consent prompts. **SSO does not guarantee that users will never need to authenticate again.** For further details, see [Microsoft's cross-tenant access guidance](https://learn.microsoft.com/en-us/entra/external-id/cross-tenant-access-overview). For SAML/Keycloak integrations, MFA requirements are reviewed as part of the agreed configuration. ### Getting started: Your IT team and EMMA coordinate the onboarding process. Microsoft Entra ID: 1. **Provide user details:** Send EMMA your Microsoft Entra tenant ID, a list of users requiring access and their required permissions. 2. **Confirm B2B access:** Ensure your organisation allows outbound B2B collaboration with EMMA's tenant and identify any relevant security or device restrictions. 3. **User setup:** EMMA configures access, invites users and assigns their permissions. 4. **Sign in:** Users complete any required invitation acceptance steps and access EmmaCMS through the Microsoft Windows App. 5. **Verify access:** Confirm that users can sign in and have the correct permissions. Client and device compatibility are confirmed during onboarding. For more information, see [Microsoft Windows App](https://learn.microsoft.com/en-us/windows-app/overview). ### SAML/Keycloak or other identity providers Contact EMMA with details of your identity provider, existing sign-in setup and MFA requirements. We will review these with your IT team before agreeing on the implementation. Changes and removal of access User invitations, permission changes and access removal are currently managed manually by EMMA. Changes to your organisation's user groups do not automatically update EmmaCMS permissions. For standard Entra B2B access, disabling or deleting a user's home account prevents further authentication once the change takes effect. However, this does **not** guarantee immediate termination of existing sessions or removal of the user's guest account and permissions at EMMA. For urgent access removal, disable the account within your organisation and contact EMMA immediately so access and active sessions can be addressed. This process also applies to customers using SAML/Keycloak integrations. For more information, see [Microsoft's access-revocation guidance](https://learn.microsoft.com/en-us/entra/identity/users/users-revoke-access). If you need assistance with SSO configuration or user access, please contact **EMMA Support** at [support@emmasys.com](mailto:support@emmasys.com).   - [Emma CMS General](https://hub.emmasys.com/help-center/emma-cms-general?hsLang=en#main-content) - [Bonded Warehouse](https://hub.emmasys.com/help-center/emma-cms-general?hsLang=en#bonded-warehouse) - [Reports](https://hub.emmasys.com/help-center/emma-cms-general?hsLang=en#reports) - [NCTS](https://hub.emmasys.com/help-center/emma-cms-general?hsLang=en#ncts) - [Customs Clearance](https://hub.emmasys.com/help-center/emma-cms-general?hsLang=en#customs-clearance) - [General](https://hub.emmasys.com/help-center/emma-cms-general?hsLang=en#general) - [ICS2](https://hub.emmasys.com/help-center/emma-cms-general?hsLang=en#ics2) - [Invoicing](https://hub.emmasys.com/help-center/emma-cms-general?hsLang=en#invoicing) - [Azure](https://hub.emmasys.com/help-center/emma-cms-general?hsLang=en#azure) - [Customer Database](https://hub.emmasys.com/help-center/emma-cms-general?hsLang=en#customer-database) - [Emma CMS Sweden](https://hub.emmasys.com/help-center/emma-cms-sweden?hsLang=en#main-content) - [General](https://hub.emmasys.com/help-center/emma-cms-sweden?hsLang=en#general) - [AES - Export](https://hub.emmasys.com/help-center/emma-cms-sweden?hsLang=en#aes-export) - [Import](https://hub.emmasys.com/help-center/emma-cms-sweden?hsLang=en#import) - [NCTS SE](https://hub.emmasys.com/help-center/emma-cms-sweden?hsLang=en#ncts-se) - [Bonded Warehouse](https://hub.emmasys.com/help-center/emma-cms-sweden?hsLang=en#bonded-warehouse) - [Temporary storage](https://hub.emmasys.com/help-center/emma-cms-sweden?hsLang=en#temporary-storage) - [Emma CMS Norway](https://hub.emmasys.com/help-center/emma-cms-norway?hsLang=en#main-content) - [Reports](https://hub.emmasys.com/help-center/emma-cms-norway?hsLang=en#reports) - [NCTS NO](https://hub.emmasys.com/help-center/emma-cms-norway?hsLang=en#ncts-no) - [Customs Clearance NO](https://hub.emmasys.com/help-center/emma-cms-norway?hsLang=en#customs-clearance-no) - [Article register](https://hub.emmasys.com/help-center/emma-cms-norway?hsLang=en#article-register) - [Emma CMS Denmark](https://hub.emmasys.com/help-center/emma-cms-denmark?hsLang=en#main-content) - [DMS Import](https://hub.emmasys.com/help-center/emma-cms-denmark?hsLang=en#dms-import) - [DMS Temporary Storage](https://hub.emmasys.com/help-center/emma-cms-denmark?hsLang=en#dms-temporary-storage) - [Bonded Warehouse](https://hub.emmasys.com/help-center/emma-cms-denmark?hsLang=en#bonded-warehouse) - [Custom Clearance](https://hub.emmasys.com/help-center/emma-cms-denmark?hsLang=en#custom-clearance) - [NCTS](https://hub.emmasys.com/help-center/emma-cms-denmark?hsLang=en#ncts) - [General](https://hub.emmasys.com/help-center/emma-cms-denmark?hsLang=en#general) - [Invoicing](https://hub.emmasys.com/help-center/emma-cms-denmark?hsLang=en#invoicing) - [Emma CMS Finland](https://hub.emmasys.com/help-center/emma-cms-finland?hsLang=en#main-content) - [Customs Clearance](https://hub.emmasys.com/help-center/emma-cms-finland?hsLang=en#customs-clearance) - [UTU Export](https://hub.emmasys.com/help-center/emma-cms-finland?hsLang=en#utu-export) - [UTU Import](https://hub.emmasys.com/help-center/emma-cms-finland?hsLang=en#utu-import) - [Emma Compliance](https://hub.emmasys.com/help-center/emma-compliance?hsLang=en#main-content) - [General](https://hub.emmasys.com/help-center/emma-compliance?hsLang=en#general) - [Functions](https://hub.emmasys.com/help-center/emma-compliance?hsLang=en#functions) - [Inbox & Document handling](https://hub.emmasys.com/help-center/emma-compliance?hsLang=en#inbox-document-handling) - [Errors & Troubleshooting](https://hub.emmasys.com/help-center/emma-compliance?hsLang=en#errors-troubleshooting) - [Emma CMS Release Notes](https://hub.emmasys.com/help-center/emma-cms-release-notes?hsLang=en#main-content) - [How to find change log in Emma CMS?](https://hub.emmasys.com/help-center/emma-cms-release-notes?hsLang=en#how-to-find-change-log-in-emma-cms) - [Release notes 2026](https://hub.emmasys.com/help-center/emma-cms-release-notes?hsLang=en#release-notes-2026) - [Other updates](https://hub.emmasys.com/help-center/emma-cms-release-notes?hsLang=en#other-updates) - [Digitoll](https://hub.emmasys.com/help-center/digitoll?hsLang=en#main-content) - [Get Started](https://hub.emmasys.com/help-center/digitoll?hsLang=en#get-started) - [Shipments & Transport](https://hub.emmasys.com/help-center/digitoll?hsLang=en#shipments-transport) - [Overview & Status](https://hub.emmasys.com/help-center/digitoll?hsLang=en#overview-status) - [Setup & Integrations](https://hub.emmasys.com/help-center/digitoll?hsLang=en#setup-integrations) - [Troubleshooting & Support](https://hub.emmasys.com/help-center/digitoll?hsLang=en#troubleshooting-support) - [Customs & Regulations](https://hub.emmasys.com/help-center/digitoll?hsLang=en#customs-regulations) - [ICS2](https://hub.emmasys.com/help-center/digitoll?hsLang=en#ics2) - [FAQ](https://hub.emmasys.com/help-center/faq?hsLang=en#main-content) - [General](https://hub.emmasys.com/help-center/faq?hsLang=en#general) - [Privacy and Security](https://hub.emmasys.com/help-center/faq?hsLang=en#privacy-and-security) - [System Status Page](https://hub.emmasys.com/help-center/system-status-page?hsLang=en) - [Troubleshooting](https://hub.emmasys.com/help-center/troubleshooting?hsLang=en#main-content) - [Citrix help - Emma CMS / EmmaCloud](https://hub.emmasys.com/help-center/troubleshooting?hsLang=en#citrix-help-emma-cms-emmacloud) - [Azure](https://hub.emmasys.com/help-center/troubleshooting?hsLang=en#azure) - [Emma CMS](https://hub.emmasys.com/help-center/troubleshooting?hsLang=en#emma-cms) - [Help Center](https://hub.emmasys.com/help-center) - [Customer Portal](https://hub.emmasys.com/customer-portal) - [Website](https://emmasys.com/) - [Status Page](https://hub.emmasys.com/help-center/system-status) [![emmalogohelpcenter](https://hub.emmasys.com/hubfs/emmalogohelpcenter.svg "emmalogohelpcenter")](http://emmasys.com?hsLang=en) [mailto:support@emmasys.com](mailto:support@emmasys.com) Copyright © 2025, Emma Systems AS