Skip to main content

How to set up Single Sign-On (Microsoft Entra ID / Office 365)

How to set up SAML Single Sign-On with Microsoft Entra ID / Office 365 for Vemcount: what to send to Vemco Support, the SAML URLs, preparing usernames, and troubleshooting.

V
Written by Vemco Group

Vemcount supports Single Sign-On (SSO) with Microsoft Entra ID / Office 365 using SAML. Your IT team sets up the app in Microsoft Entra ID, and Vemco Support activates SSO on the Vemcount side.

Good to know: SSO only handles the login. User accounts are not created or synchronised automatically from Microsoft Entra ID. Each user must still exist in Vemcount, with the right role, permissions and location access.

Important username rule: for Microsoft login, the Vemcount username must match the user's Microsoft Entra email address / UPN. Do not use the Azure Object ID / UUID as the Vemcount username.

Overview of the steps

  1. Create or open the Vemcount SAML application in Microsoft Entra ID.

  2. Find your Microsoft Entra Directory / Tenant ID.

  3. Find your Vemcount Company ID.

  4. Set up the SAML URLs with your Tenant ID.

  5. Send the required information to Vemco Support.

  6. Check that Vemcount usernames match the users' Entra email addresses / UPNs.

  7. Test the login.

Find your Directory / Tenant ID

  1. Open Microsoft Entra ID / Azure Portal.

  2. Go to Overview.

  3. Copy the Directory / Tenant ID.

Find your Vemcount Company ID

Open your company in Vemcount and look at the web address. Example: https://vemcount.app/company/123456789012345678/location. Here the Company ID is 123456789012345678.

The Company ID is the main company account. It is not the same as the Location IDs of your stores or sites.

SAML URLs

Replace DIRECTORY_TENANT_ID with your own Tenant ID.

  • ACS / Reply URL: https://vemcount.app/saml/v2/DIRECTORY_TENANT_ID/acs

  • Login URL: https://vemcount.app/saml/v2/DIRECTORY_TENANT_ID/login

  • Logout URL: https://vemcount.app/saml/v2/DIRECTORY_TENANT_ID/logout

  • Metadata URL: https://vemcount.app/saml/v2/DIRECTORY_TENANT_ID/metadata

What to send to Vemco Support

Email support@vemcogroup.com with:

  • Your Microsoft Entra Directory / Tenant ID.

  • Your Vemcount Company ID.

  • The base64 encoded certificate/key exported from the SAML application in Microsoft Entra ID.

  • Confirmation that Vemcount usernames match the users' Entra email addresses / UPNs.

Prepare users before testing

  • The user already exists in Vemcount.

  • The Vemcount username matches the user's Entra email address / UPN, for example user@example.com in both places.

  • There are no extra spaces before or after the username.

  • The user has the right role and company or location access.

  • The user has a Microsoft account, and is signed in to it on the work device used for Vemcount.

Test the Microsoft login

  1. Confirm that Vemco Support has activated SSO for your company.

  2. Assign the relevant users or groups to the Vemcount SAML application in Microsoft Entra ID.

  3. Open Vemcount and choose Sign in with Microsoft.

  4. If it fails, try again in a private or incognito browser window.

Troubleshooting

Normal login works, but Microsoft login fails. The two use different login flows. First check that the Vemcount username matches the Entra email address / UPN.

The user gets an error after accepting the Microsoft prompt. Microsoft accepted the login, but Vemcount could not match the user. Check that the username matches, the user is active in Vemcount, has the right role and location access, and is using the right Microsoft account. Test in a private window.

When to contact support

Contact support@vemcogroup.com if SSO still does not work after these checks. Include the affected user's email address, your company name, the approximate time of the failed login and a screenshot of the error. Do not send screenshots that show full callback URLs or login codes.

Did this answer your question?