Enable SSO for Xink Admins with Entra ID

Short answer:
Enable Single Sign-On (SSO) by linking an Account Admin to Entra ID (Azure AD). Once linked, the admin can sign in using their Microsoft credentials.

Summary:
This guide explains how to enable SSO for an Account Admin in the Xink portal. It assumes that SSO (OpenID/OAuth) is already configured in your environment.

Step 1: Enable external authentication

1. Click the gear icon or go to Preferences.
2. Open Security under the General tab.
3. Enable "Allow External Authentication".
4. Click Save.

Step 2: Link the Account Admin to Entra ID

1. Log in with the Account Admin you want to link.
2. Click your name and open Logon Options.
3. Click Link Azure AD Account.
4. Sign in using your Microsoft (Entra ID) credentials.
5. Log out and sign back in using the Microsoft sign-in option.

Once linked, the option will change to Unlink Azure AD Account, confirming that SSO is active.

Optional: Force SSO for all admins

You can require all admins to sign in using Microsoft credentials by enabling Force Azure AD Open ID.

This will:

• Disable login with Xink username and password
• Require all admins to use Microsoft (SSO) login

Adding new admins when SSO is enforced

• Create the admin in Xink using their email address
• The email must match their Entra ID account
• The account will automatically link on first login
• Login is only possible using Microsoft (SSO)

Xink matches the email address between Entra ID and Xink to complete the connection automatically.

Next steps

• Manage email signature rules