# Sso

# How To Configure Office 365 Sso Login In CrownSIS

### Overview

Microsoft Office 365-based Single Sign-On (SSO) is now available in CrownSIS. This guide will help you set up and enable SSO so that users can log in with their Microsoft credentials.

* * *

### Step 1: Register Your App in Microsoft Azure

  1. Go to the [Azure Portal](https://portal.azure.com/).

  2. Sign in using your Microsoft credentials.

  3. In the left sidebar, click **“Microsoft Entra ID”**.  
![](https://lh7-rt.googleusercontent.com/slidesz/AGV_vUcCaUbMhgJEaRksAs1yJ0_yvO9hPLpIDfceBINGKhlItvsiORQxElzxSrNJknlmVWlyAZAKauuhnqXt_l0Ag699Jm9RiGGQwdCugMM5Ib4LnScKTLPFNRf4koALQOl9U7BUderA1g=s2048?key=Pkev8a6txLJ5oDHbzC2zCnep)

  4. Select **“App registrations”** and click on **“New registration”**.![](https://lh7-rt.googleusercontent.com/slidesz/AGV_vUeJsdEMrLPMP7FKPgalmTBQk0UcFCy_cylpiSzC1lNBRQpUx0biCWNL-6boLnnV-Kd-hNniJ8Q45vvrHJnOmZh2YAVOtxgfkzzPuhdAAwU2z8H6_e2F79HYW7oB9aEb6XyNF4btMg=s2048?key=Pkev8a6txLJ5oDHbzC2zCnep)

  5. Provide a **name** for your app.

  6. Set the application type as **SPA (Single Page Application)**.

  7. Under **Redirect URI** , enter the CrownSIS redirect URL:  
`https://<your-school-subdomain>.CrownSIS.net/school/dashboards  
![](https://lh7-rt.googleusercontent.com/slidesz/AGV_vUfMPIxwBBUoMUpeNmxn-GmvkccY-2HWzb15zG1ujf1ALQjiY0Z7xe9qmpuWVcSCzdge3gPq5qnRQNZqrFXTvABy_gkOEW5TbZHSiD1cqfg75CtMZEMaYeVYIVF1Y1uxibGFZC8RJQ=s2048?key=Pkev8a6txLJ5oDHbzC2zCnep)`

  8. Click **Register**.




* * *

### Step 2: Copy Required IDs

Once the app is registered:

  * Copy the following and store them safely:

    * **Application (client) ID**

    * **Object ID**

    * **Directory (tenant) ID**




You will need these values in the CrownSIS SSO settings screen.  
![](https://lh7-rt.googleusercontent.com/slidesz/AGV_vUd4zZEHG3b8P4SB7vyChTTMi7YDL9r0p7TFlyOhNR3u8ia4BFwnprmev100C7SeZHHK9DRkjpCTcWt-AX3hbNyA2oLX6Un0uCKaoDF5eOH0BIuuxqH0FqzZ-hwEU0IV3ZgOKqRd1A=s2048?key=Pkev8a6txLJ5oDHbzC2zCnep)

* * *

### Step 3: Configure SSO Settings in CrownSIS

  1. Log in to your CrownSIS Admin portal.

  2. Navigate to: **Tools > SSO Settings > Office 365**

  3. Enter the IDs copied from Azure:

     * Application Client ID

     * Object ID

     * Directory Tenant ID

     * Redirect URL (same as above)

  4. Toggle **Allow SSO Login** to **ON**.

  5. Click **Submit**.




* * *

### Step 4: Invite or Create Users in Microsoft Azure

  * You can either **create** a new user or **invite** an existing user to your Azure Active Directory.  
![](https://lh7-rt.googleusercontent.com/slidesz/AGV_vUdKLwxDgRwjK_pscHtyExcn_3aujyec8Wb0p62LQZlxFIGFBSkjMl651XjxkqJlqgHcMpJmeJBNyOFnOY0qoKqcvgbfFHZJlVaYdjmo02l7-_uFrnBElPU_KE1Gmb3kcC73ym0acA=s2048?key=Pkev8a6txLJ5oDHbzC2zCnep)

  * The user will receive an **invitation email**.

  * On acceptance, Microsoft will initiate a quick **authentication setup**.

  * During setup, the user may need to verify via the **Microsoft Authenticator App**. If it's a personal Microsoft account, select **“Personal”** during authentication.




* * *

### Step 5: Login Experience

Once configured:

  * Users will now see the Microsoft login option on your CrownSIS login screen.

  * Upon clicking, they will be redirected to Microsoft login.

  * After successful authentication, they will land on the CrownSIS dashboard.

# How To Integrate Google Sso With CrownSIS

## Introduction

Google Single Sign-On (SSO) allows users to securely access CrownSIS using their Google account credentials. This not only enhances security but also simplifies the login experience for students, teachers, and administrators.

This guide walks you through the updated steps to configure Google SSO in CrownSIS using Google Cloud Console.

* * *

## Step 1: Login to Google Cloud Console

Go to:  
👉 <https://console.cloud.google.com/apis/credentials>

* * *

## Step 2: Create a New Project

  1. Go to the **Credentials** section.

  2. Click on **“Create Project”**.




![](https://lh7-rt.googleusercontent.com/slidesz/AGV_vUdur6qN2TS-Vz7RwElrRFp56c8B13K5HXcowV44mddnom7kZ1PQ_9zDKDldfsUZefMVxLQmrXWTdrS3CHnUsY1avUoaoO1ibcp35OymQavyC2Lqf95FitxLcztMKZd5IgCKnkGrYA=s2048?key=SEVS9Kbd7dPGixSIR36dtg)

* * *

## Step 3: Name the Project

Enter a suitable **Project Name** that reflects your institution or app purpose.  
Click **Create** to proceed.

![](https://lh7-rt.googleusercontent.com/slidesz/AGV_vUdYuzfkgt2QyvgP7nheNZGNmaPOHwYbpFt2QQpZI-h34WQJxMZk_Bnrpt-J_nvndjZSYYBMWOJ2k1-2j1Z6CFdPRVdD9R3ac8TWbNFkEF4KfpTux2EXZeV-f5Mdqik1Pub6LC6hlA=s2048?key=SEVS9Kbd7dPGixSIR36dtg)

* * *

## Step 4: Access OAuth Consent Screen

After the project is created, a screen will appear.  
Click on any navigation button or link to proceed to the **OAuth consent screen** setup.

![](https://lh7-rt.googleusercontent.com/slidesz/AGV_vUe7500UHismnDncgPrOMoxicFIxiuS-aXoMavgbVuunCWc09ypxf9gc-YRHsPtnkU7nB7P5TZOno4FegKtt6-83VH5I29ODEMr1La_PG3qtUiai_9Nxr6MC5yy5PEs47G_h81r_TQ=s2048?key=SEVS9Kbd7dPGixSIR36dtg)

* * *

## Step 5: Start the Consent Screen Setup

Click **“Get Started”** on the consent screen setup page.

![](https://lh7-rt.googleusercontent.com/slidesz/AGV_vUfrQxLA1x0BBqcT_Hk11k00bzcaRRc18cfWE7xda33_KUM4tnBNr9tVAxzcH-PyN9CnqImKC3Tu6dtrAA5z3xk7Q6wFpCYplZokWRjch4fOoy6KyfyfiJg-UhErB27HzAfqv1FBMQ=s2048?key=SEVS9Kbd7dPGixSIR36dtg)

* * *

## Step 6: Configure App Info and Audience

  1. Enter your **App Name** and **User Support Email**.

  2. Choose the **Audience** (e.g., External for most use cases).

  3. Fill in **Developer Contact Information**.

  4. Click **Finish** to save the configuration.




> 🔗 **Before proceeding** , please review Google’s [App Branding Policy](https://support.google.com/cloud/answer/15549049)

![](https://lh7-rt.googleusercontent.com/slidesz/AGV_vUdwy7pXv92St4hqnYPOlGECagAH79eBOiPtnZzhip_LjJGstbFPzNA5IeE5xCgiuSEXmlRjcaaCRRG9xpIwaD_rB6tlYYroCldcbb-98aS4rFyx46nl4ywHZa0vDnYcBTb2-jHMiQ=s2048?key=SEVS9Kbd7dPGixSIR36dtg)

* * *

## Step 7: Create OAuth Client

Go back to the **Credentials** page and click **“Create Credentials → OAuth Client ID”**.

![](https://lh7-rt.googleusercontent.com/slidesz/AGV_vUd7BynLx7yWCm8KtM5loI4a3OzLwrEzQat48VZInojsZgzgQUCnL8ZHM3FrBWJi7TPMAuSGev_dnoA3qdGKdSq_6PIxIMKHe51du58E34ziC0djEvzGO_OtqEtfkGjUaBP10OWj=s2048?key=SEVS9Kbd7dPGixSIR36dtg)

* * *

## Step 8: Select Application Type

Choose **“Web application”** as the type.

![](https://lh7-rt.googleusercontent.com/slidesz/AGV_vUe7u1647SvHLlAUtX92RBUEh6vaajuqfElWOB5EFynY1RmWqxI5iMrWWGyZ-RGAsg5YqrGC4a1cYF6KSEMg5zRHsik9XBbF_KeFkH0ficILdhPDVKNAhqsodEYbydHjiUmpkg3P=s2048?key=SEVS9Kbd7dPGixSIR36dtg)

* * *

## Step 9: Configure App Settings

  1. Enter a **Name** for your application.

  2. Under **Authorized JavaScript origins** , input your school’s CrownSIS URL (e.g., `<https://school.CrownSIS.com>`).

  3. ❗ Do **NOT** enter any **Authorized redirect URIs**.




Click **Create**.

![](https://lh7-rt.googleusercontent.com/slidesz/AGV_vUeP7FPpcL4II2X4qaaFYiP7POGM2IgOgrJlsDcEpwNBbQqOCzsTncn-aEqMgW3-0OAwmfFGQnF-IzBWw6yLoKNyD_xZwVHtf6jsdYTN5iMotZBbOEx6XrP8mP4BeXL84vDCFYwyIQ=s2048?key=SEVS9Kbd7dPGixSIR36dtg)

* * *

## Step 10: Copy Client ID and Client Secret

After creation, Google will generate:

  * **Client ID**

  * **Client Secret**




Copy and save these values securely.

**![](https://help.opensis.com/galleryDocuments/edbsn87a67f4bef127e634164d7bf1fb0d851133279f6e1b24457f48b9b60e19800e9172e5d7e2f69d1369b684e75b8eb8d5f?inline=true)**

* * *

## Step 11: View Application in Clients List

Your created application will appear in the list of OAuth 2.0 clients.

![](https://help.opensis.com/galleryDocuments/edbsn10ef1f8c03d0e220f18c7f3d6e01b8e250f7446b1341b1dc818a10373876b4dc216278ee6867923d13c8b4ac34eec8de?inline=true)  


* * *

## Step 12: Access App Details Again

Click the **App Name** in the client list to reopen the detail page if you need to view the **Client ID** or **Secret** later.

![](https://help.opensis.com/galleryDocuments/edbsn10ef1f8c03d0e220f18c7f3d6e01b8e2e053f9eeefc08a24a7d3a32ff72cc448dc556bb2f0784f905f2870fc4604e386?inline=true)  


* * *

## Step 13: Configure SSO in CrownSIS

  1. Log in to CrownSIS as an Admin.

  2. Navigate to **Settings → SSO Settings**.

  3. Select **Google SSO**.

  4. Enter the **Client ID** and **Client Secret** copied earlier.

  5. Click **Save**.




![](https://help.opensis.com/galleryDocuments/edbsn28227769963865e20eade0d6a73188d7cba029a63e1e759e14566cdadd48ca54de0abd8723228acc1d63ec28b3421838?inline=true)  


* * *

## Final Output

Your users will now see a **“Sign in with Google”** button on the login screen, enabling instant access via Google credentials.

* * *

## Troubleshooting Tips

  * ✔ Make sure your **JavaScript Origin** matches the CrownSIS domain exactly.

  * ✔ Your domain must be included in **Authorized Domains** in the consent screen.

  * ✔ Check that server time is accurate to avoid token issues.




* * *

## Need Help?

If you face any issues, feel free to contact our support team at opensishelp@os4ed.com.