Sso
How To Configure Office 365 Sso Login In CrownSIS
Overview
Microsoft Office 365-based Single Sign-On (SSO) is now available in CrownSIS. This guide will help you set up and enable SSO so that users can log in with their Microsoft credentials.
Step 1: Register Your App in Microsoft Azure
-
Go to the Azure Portal.
-
Sign in using your Microsoft credentials.
-
In the left sidebar, click “Microsoft Entra ID”.
-
Select “App registrations” and click on “New registration”.
-
Provide a name for your app.
-
Set the application type as SPA (Single Page Application).
-
Under Redirect URI , enter the CrownSIS redirect URL:
https://<your-school-subdomain>.CrownSIS.net/school/dashboards  -
Click Register.
Step 2: Copy Required IDs
Once the app is registered:
-
Copy the following and store them safely:
-
Application (client) ID
-
Object ID
-
Directory (tenant) ID
-
You will need these values in the CrownSIS SSO settings screen.
Step 3: Configure SSO Settings in CrownSIS
-
Log in to your CrownSIS Admin portal.
-
Navigate to: Tools > SSO Settings > Office 365
-
Enter the IDs copied from Azure:
-
Application Client ID
-
Object ID
-
Directory Tenant ID
-
Redirect URL (same as above)
-
-
Toggle Allow SSO Login to ON.
-
Click Submit.
Step 4: Invite or Create Users in Microsoft Azure
-
You can either create a new user or invite an existing user to your Azure Active Directory.
-
The user will receive an invitation email.
-
On acceptance, Microsoft will initiate a quick authentication setup.
-
During setup, the user may need to verify via the Microsoft Authenticator App. If it's a personal Microsoft account, select “Personal” during authentication.
Step 5: Login Experience
Once configured:
-
Users will now see the Microsoft login option on your CrownSIS login screen.
-
Upon clicking, they will be redirected to Microsoft login.
-
After successful authentication, they will land on the CrownSIS dashboard.
How To Integrate Google Sso With CrownSIS
Introduction
Google Single Sign-On (SSO) allows users to securely access CrownSIS using their Google account credentials. This not only enhances security but also simplifies the login experience for students, teachers, and administrators.
This guide walks you through the updated steps to configure Google SSO in CrownSIS using Google Cloud Console.
Step 1: Login to Google Cloud Console
Go to:
👉 https://console.cloud.google.com/apis/credentials
Step 2: Create a New Project
-
Go to the Credentials section.
-
Click on “Create Project”.
Step 3: Name the Project
Enter a suitable Project Name that reflects your institution or app purpose.
Click Create to proceed.
Step 4: Access OAuth Consent Screen
After the project is created, a screen will appear.
Click on any navigation button or link to proceed to the OAuth consent screen setup.
Step 5: Start the Consent Screen Setup
Click “Get Started” on the consent screen setup page.
Step 6: Configure App Info and Audience
-
Enter your App Name and User Support Email.
-
Choose the Audience (e.g., External for most use cases).
-
Fill in Developer Contact Information.
-
Click Finish to save the configuration.
🔗 Before proceeding , please review Google’s App Branding Policy
Step 7: Create OAuth Client
Go back to the Credentials page and click “Create Credentials → OAuth Client ID”.
Step 8: Select Application Type
Choose “Web application” as the type.
Step 9: Configure App Settings
-
Enter a Name for your application.
-
Under Authorized JavaScript origins , input your school’s CrownSIS URL (e.g.,
<https://school.CrownSIS.com>). -
❗ Do NOT enter any Authorized redirect URIs.
Click Create.
Step 10: Copy Client ID and Client Secret
After creation, Google will generate:
-
Client ID
-
Client Secret
Copy and save these values securely.
Step 11: View Application in Clients List
Your created application will appear in the list of OAuth 2.0 clients.
Step 12: Access App Details Again
Click the App Name in the client list to reopen the detail page if you need to view the Client ID or Secret later.
Step 13: Configure SSO in CrownSIS
-
Log in to CrownSIS as an Admin.
-
Navigate to Settings → SSO Settings.
-
Select Google SSO.
-
Enter the Client ID and Client Secret copied earlier.
-
Click Save.
Final Output
Your users will now see a “Sign in with Google” button on the login screen, enabling instant access via Google credentials.
Troubleshooting Tips
-
✔ Make sure your JavaScript Origin matches the CrownSIS domain exactly.
-
✔ Your domain must be included in Authorized Domains in the consent screen.
-
✔ Check that server time is accurate to avoid token issues.
Need Help?
If you face any issues, feel free to contact our support team at opensishelp@os4ed.com.