hey all. New to memberstack - Im looking for a solution for an intranet. My client wants to use Microsoft SSO to secure the intranet which is on webflow. The key thing here is they want anyone with their business email address to get access. eg. anyone who has an email @companyname.co.nz will instantly get access by using the Microsoft SSO. they wont have to create a login at all. Is this possible with memberstack? is there a better way?
How to set up Microsoft SSO for a Webflow intranet that automatically grants access to anyone with a company email domain?
Answered
9 comments
Hey!! That is possible with all social logins, EXCEPT Microsoft is the difficult one with Webflow because you would need to upload a server-side file which Webflow does not allow.
How many people are in the company? New users can be created for each and would only allow people with a company email to log in.
Thanks so much for the reply! So it's not possible to have it work this way without manually creating users for each person?
Actually, you can have it so that only domains with your domain are allowed, and then you could do passwordless signup/logins!
It's not technically SSO, but it's quite close in terms of the experience
Hmmm OK. Whats the process for the end user with a password less setup?
They would enter their email, if it's valid (your domain), it would send them a one-time pin via email to log in. Then they would continue to be logged in on that device according to your set max session duration
You can frame the UI around the one-time pin being a "security measure"
Ok thanks heaps.
Was the Microsoft SSO authentication deprecated?
I was counting on that for one of our big sites that's launching soon - and coming back after a few months to finalize the site - I see that it is now deprecated.
Looks like Microsoft added a requirement on their end, and in order to verify the account, and in Webflow's particular case, it doesn't allow to add the required file Microsoft is asking.
If you're using Webflow, there's a workaround by using Cloudflare workers.
Probably that's why it says deprecated. But it doesn't necessarily mean it won't work. It's that its limited. Here's the documentation details
https://docs.memberstack.com/hc/en-us/articles/9151844094107-Microsoft-Authentication-Deprecated
Also - Webflow announced support for .well-known files.
I haven't tried it yet personally, but I suppose it could/should work now https://webflow.com/updates/expanded-well-known-file-support
Please sign in to leave a comment.