For the complete documentation index, see llms.txt. This page is also available as Markdown.

Single Sign-On

Sign in to Qore with Google or Microsoft, including Microsoft Entra ID accounts.

Qore lets people sign in with an account they already have: a Google account, or a Microsoft account, including work and school accounts in Microsoft Entra ID. Nobody needs a separate Qore password to sign in this way.

Single sign-on doesn't replace invitations. Everyone, however they sign in, must first be invited to the account by an administrator.

The Qore sign-in page: Let's Get You Started, with a Continue with Email button, then an or divider, then Continue with Google and Continue with Microsoft
The sign-in page, with email first and the single sign-on options below it.

At a glance

Method
Button on the sign-in page
Who can use it

Google

Continue with Google

Invited people whose email is a Google account

Microsoft

Continue with Microsoft

Invited people with a Microsoft Entra ID (work or school) account or a personal Microsoft account

Email and password

Continue with Email

Any invited person. See Password Sign-In

Access is invite-only

Qore has no self sign-up. The sign-in page reads "Create an account or sign in to continue your journey", but an account is created only when an administrator invites someone from Users. This applies to every sign-in method.

To give someone access:

  1. In Control Center, open Admin → Users and select + Create User.

  2. Enter their details. The Email must be the address they'll sign in with: their Google address for Google, or their Microsoft or Entra ID address for Microsoft.

  3. Assign their roles and save. They receive an invitation and can then sign in with any method available to them.

If someone tries to sign in with an email that hasn't been invited, Qore shows a validation error and doesn't let them in. Invite that exact address, then ask them to try again.

Match the address exactly. A person invited as [email protected] can't sign in with Microsoft as [email protected], even if both reach the same mailbox. Invite the address their Microsoft or Google account actually uses.

Sign in with Google

  1. On the sign-in page, select Continue with Google.

  2. Choose your Google account, or sign in to Google if you aren't already.

  3. Qore opens, signed in.

You're never asked to create or enter a Qore password when you sign in with Google.

Sign in with Microsoft

  1. On the sign-in page, select Continue with Microsoft.

  2. Sign in with your Microsoft account. This can be a work or school account from your organization's Microsoft Entra ID directory, or a personal Microsoft account.

  3. Qore opens, signed in.

Qore supports multi-factor authentication. When you sign in with your organization's Entra ID account, your organization's own Microsoft sign-in rules apply, including multi-factor authentication, so you may be asked to approve the sign-in on your phone or enter a code. Qore doesn't store your Microsoft password.

Which buttons appear

Each single sign-on button is turned on per Qore deployment. Your sign-in page may show Continue with Google, Continue with Microsoft, both, or neither. When none is turned on, the page shows only Continue with Email, with no "or" divider.

Which methods are on isn't set from Control Center. If you need a method that your sign-in page doesn't show, ask your Qore administrator.

Notes and limitations

  • Invitation first, always. Single sign-on proves who someone is; the invitation decides whether they get in.

  • One address per person. The invited email is the identity Qore checks, whichever method the person uses.

  • Roles still apply. Signing in with single sign-on gives the same access as signing in with a password. What someone can do comes from their roles.


Maintained by Abhishek Paul AI-assisted, human-approved

Last updated

Was this helpful?