> ## Documentation Index
> Fetch the complete documentation index at: https://helpdocs.getthread.com/llms.txt
> Use this file to discover all available pages before exploring further.

# Set Up Single Sign-On (SSO) with Microsoft 365

> Enable Microsoft 365 Single Sign-On for Thread Inbox and Admin so your team can log in securely with M365 credentials instead of one-time passcodes.

<Frame>
  <img src="https://mintcdn.com/thread/XL4w2StwzALuT8Pw/images/a3d2977b-gtm-sso.gif?s=7976553c9ceee292d8f343d58ed4ebd6" alt="Animation showing Microsoft 365 Single Sign-On login for Thread" width="838" height="527" data-path="images/a3d2977b-gtm-sso.gif" />
</Frame>

Thread Single Sign-on (SSO) allows you to login to thread Inbox and the admin panel using your Microsoft account. This doc aims to teach you how to setup this feature

Thread workspace Admins can enable Service Team members to log into Thread Inbox using one of two authentication methods:

* One-time password
* Single Sign-On powered by Microsoft 365

Many MSPs opt into the security and reliability benefits of Microsoft 365 authentication. Here's how to get started:

## How to Configure

<Steps>
  <Step title="Open the Microsoft 365 and Teams App integration">
    Navigate to the Thread Admin Panel and select [Integrations -> Microsoft 365 and Teams App](https://admin.getthread.com/dashboard/integrations/chat/msteams/integrations)
  </Step>

  <Step title="Connect Microsoft 365">
    Below the option titled Microsoft 365, click **Connect** if it isn’t set up and follow on-screen instructions (described in the first section of [this page](https://docs.getthread.com/article/ynz0rlxyls-teams-companion-app) for additional support)
  </Step>

  <Step title="Enable the SSO toggle">
    Once Microsoft 365 is listed as “Connected”, set the Enable SSO toggle to **ON**

    <Frame>
      <img src="https://mintcdn.com/thread/wn6TrV7GJB-j5H1g/images/d4e64526-image.png?fit=max&auto=format&n=wn6TrV7GJB-j5H1g&q=85&s=a8b94d6282057699c39bb7aa2ce8922e" alt="Enable SSO toggle set to ON below the connected Microsoft 365 integration" width="992" height="597" data-path="images/d4e64526-image.png" />
    </Frame>
  </Step>

  <Step title="Finish setup">
    Your workspace is now set up
  </Step>
</Steps>

## Once SSO is setup

Once SSO is setup and configured, point your service team to log into [Inbox](http://inbox.getthread.com/login)which will let your teammates take advantage of M365’s authentication.

<Frame>
  <img src="https://mintcdn.com/thread/XL4w2StwzALuT8Pw/images/66d1a0bd-image.png?fit=max&auto=format&n=XL4w2StwzALuT8Pw&q=85&s=310229ad7d9f1b65a2643828055f7c97" alt="Thread Inbox login screen with the Microsoft 365 Single Sign-On option" width="732" height="699" data-path="images/66d1a0bd-image.png" />
</Frame>

Logins will be restricted to only M365 SSO for users with ‘**Member**’ role Thread users; users with the ‘**Admin**’ role can also login through the one-time password as a backup alternative

## FAQ Section

<AccordionGroup>
  <Accordion title="Does SSO replace logging in with the One Time Passcode?">
    It does not! Users who have the "admin" role can choose to still login with the one time passcode sent to their email address, and users logging in without a Microsoft account will still have to use the one time passcode to login.
  </Accordion>
</AccordionGroup>


## Related topics

- [Microsoft Teams App Permissions Reference](/security-billing/microsoft-teams-app-permissions.md)
- [Security & Compliance Owner](/start-here/roles/security-compliance-owner.md)
- [Set Up Thread](/start-here/setup/overview.md)