Enable SSO sign-in with Google or Microsoft

With SSO sign-in, your users sign in to Complement with your organisation's Google or Microsoft account, instead of an email and password specific to Complement.

Before you start#

• SSO sign-in is set up by Complement. There is no settings screen in the app: ask your Complement account manager for it.
• A platform uses a single provider: Google or Microsoft.
• SSO does not create any accounts. Each user must already have an active Complement account, with the same email address as their Google or Microsoft account.

What changes on the sign-in page#

Your platform's sign-in page adapts to the chosen provider:

Your platform's sign-in link#

These rules apply to your platform's own sign-in page: its dedicated sign-in link, or its white-label address. Complement's general sign-in page always shows the Email and Password fields, and never the Google button.

Ask your Complement account manager for your platform's sign-in link, then share it with your users. After they sign out, Complement brings them back to this page.

If no account matches#

The Connect with Microsoft button only works for an existing, active Complement account. Otherwise, sign-in is refused with one of these messages:

• "Microsoft sign-in failed. Use an active Complement account and try again. If the problem persists, contact your organization."
• "No active Complement account matches this sign-in. Contact your organization."

The second message also appears with the Google button when no account matches.

Create your users' accounts#

On a platform using SSO, the window for adding a learner offers the SSO account · notification only option instead of Email invitation.

1. Open Employees, then click Add an employee.
2. Fill in the first name, last name, email address and team. Enter the address of the person's Google or Microsoft account.
3. Choose SSO account · notification only.
4. Click Add employee.

The learner receives an email telling them their account is ready. This email does not contain a password: they sign in with your provider's button.

The same option appears when you add a member of the teaching team from Admin.

Passwords#

On a platform using SSO, the Profile page does not offer a password change, either to learners or to the teaching team. Instead, it shows the Connection card, with the SSO authentication block: "Your account is managed by your organisation. To change your password, use your SSO portal."