SquaredUp B2C User Authentication
SquaredUp uses the Azure Active Directory B2C for authenticating its users, which is a Microsoft service that performs the legwork of proving users identities.
This means that SquaredUp never actually sees your login credentials (for Microsoft, Google, email / password). Instead, SquaredUp is only told who a user is, and whether they are authenticated.
For more information on B2C see What is Azure Active Directory B2C?
Initializing a SquaredUp enterprise app in Azure
SquaredUp is automatically added to your list of apps in Azure under Home > Enterprise applications whenever an Azure admin logs into SquaredUp for the first time. During this initial login, admins are also prompted to grant admin consent.
When you grant tenant-wide admin consent to an application, you are giving the application access to the permissions requested on behalf of the whole organization, meaning that you don't need to supply permissions to individual users.
In some circumstances however, you may need to manually provide admin consent instead - which can be performed directly in Azure.
Granting admin consent when logging into SquaredUp
When an Azure admin logs into a SquaredUp tenant for the first time, B2C creates an enterprise app in your Microsoft EntraID directory that allows you to control who can authenticate with SquaredUp.
The Azure admin does not need to be a permanent SquaredUp user, but they do need to log into SquaredUp at least once to grant consent "properly", as the admin is prompted to grant admin approval for SquaredUp and all the users of your tenant.
Granting admin consent in Azure
If for any reason you need to manually grant admin approval for SquaredUp users then this can be performed in Azure.
To grant tenant-wide admin consent to SquaredUp via the Enterprise applications pane:
- Sign in to the Microsoft Entra admin center as at least a
Cloud Application Administrator. - Navigate to Identity > Applications > Enterprise applications > All applications.
- Search for your SquaredUp enterprise app and then select it.
- Select Permissions under Security from the left-hand pane.
- Click the Grant admin consent for SquaredUp button.
