Sign in to DuoApp with Microsoft.
Joiners and leavers handled by IT.
Microsoft Entra ID connects DuoApp to your organisation's Microsoft accounts. Your team signs in with their Microsoft work account on the web and in the DuoApp mobile app, protected by the MFA and Conditional Access rules your IT department already uses. With automatic provisioning, people are added to DuoApp when IT assigns them - and switched off when IT removes them, with everything they did kept on record.
Your IT team decides who gets in. DuoApp runs the work.
One sign-in for your team
People sign in with the Microsoft work account they already use every day - on the web and in the DuoApp mobile app. No separate DuoApp password to remember.
Your security policies apply
Microsoft handles the sign-in, so the MFA, Conditional Access and password rules your IT department has set up apply to DuoApp too.
Joiners added automatically
IT assigns a user or group in Microsoft Entra ID and DuoApp creates the user for you. Name and email changes in Entra flow through too.
Leavers switched off automatically
Disable, unassign or delete someone in Entra and their DuoApp access is switched off - with their timesheets, approvals, documents and history kept.
Microsoft for some, passwords for others
Choose exactly who must sign in with Microsoft. Subcontractors outside your organisation can carry on with their DuoApp password.
Every change on the record
Every provisioning and sign-in change is written to DuoApp's audit log, showing whether it came from Entra or from someone in DuoApp.
From first day to last day, without a spreadsheet of logins.
Assign users in Entra
IT assigns the people or groups who should use DuoApp to the DuoApp app in Microsoft Entra ID.
Users appear in DuoApp
Entra provisions each person to DuoApp. They're created with their name and email, marked "Needs configuration".
Set up their access
An admin gives them a role, projects and site access - the same way you set up anyone in DuoApp today.
Sign in with Microsoft
They choose "Sign in with Microsoft" on the web or in the mobile app. Microsoft checks MFA and your policies.
Remove access in Entra
When someone leaves, IT disables or unassigns them in Entra. DuoApp access is switched off; their history is kept.
A clear split between Microsoft and DuoApp.
Microsoft Entra ID decides who someone is and whether they can use DuoApp. Everything about how they work in DuoApp stays with your DuoApp admins.
| Microsoft Entra ID | DuoApp | |
|---|---|---|
| Who the person is - name and email | Managed here | - |
| Whether they can get into DuoApp | Managed here | - |
| Password, MFA and Conditional Access | Managed here | - |
| Role and permissions | - | Managed here |
| Projects and site access | - | Managed here |
| Supervisors | - | Managed here |
| Timesheet and payroll settings | - | Managed here |
| Timesheets, site attendance, approvals, documents and audit history | - | Kept in DuoApp - even after Entra removes someone |
Removing someone in Entra deactivates them in DuoApp - it never deletes them.
Built so the wrong person can't get in.
Explicitly connected
Your Microsoft organisation is connected to your DuoApp company by your own admin, using your tenant ID. DuoApp never matches organisations by email domain.
Identified by Microsoft's IDs
Users are recognised by Microsoft's immutable IDs, not by name or email address - so renaming an account or reusing an email address doesn't change who it signs in as.
Audited, with its source
Users created, updated or switched off, tokens created or revoked, sign-in settings changed - all recorded in the audit log, marked as coming from Entra (SCIM) or DuoApp.
One flat add-on price for your company.
- One price for your company, however many people sign in with Microsoft.
- Added as a separate line on your monthly DuoApp invoice, on top of your usual per-user price.
- Switched on by a company admin in Admin → DuoApp Features, in the People section.
- Available on request while we roll it out - contact us to enable it.
Microsoft Entra ID, explained.
How much does Microsoft Entra ID cost?
How do we get it?
Does everyone have to sign in with Microsoft?
Does it work on the mobile app?
Do we have to use automatic provisioning?
What happens when someone leaves?
Can Microsoft Entra ID change someone's role or projects in DuoApp?
Is DuoApp in the Microsoft Entra app gallery?
Does this change anything for existing customers?
Let IT own the logins. Let DuoApp run the job.
Talk to us about enabling Microsoft Entra ID for your company, or send your IT team the step-by-step setup guide.