Signing in with Microsoft (Entra ID)

How do I sign in with Microsoft?

Some organizations provide a direct sign-in link containing an organization hint. Use that link when the same Microsoft tenant maps to more than one TankActive organization. TankActive accepts only safe in-application return paths and otherwise opens the dashboard.

1. 1Open the TankActive sign-in page.
2. 2Select Continue with Microsoft. You do not need to fill the TankActive Email address or Password fields for this route.
3. 3Choose the Microsoft work account that belongs to the connected organization and complete Microsoft's prompts.
4. 4After Microsoft returns you to TankActive, wait for the secure session to be established and the requested TankActive page to open.

When must the account already exist?

The organization's sign-in policy controls first-time access. When Automatically create TankActive accounts on first sign-in is enabled, a verified Microsoft user can be created with the configured default role. When it is disabled, the Microsoft identity must already be linked to a TankActive user.

An administrator can also enable Link Microsoft sign-in to existing accounts with the same email. If that option is off, or an email collision cannot be linked safely, TankActive asks the user to contact an administrator. Allowed email domains can further restrict which addresses in the connected Microsoft tenant may sign in.

How does an administrator set up Microsoft sign-in?

Administrators with organization settings access can open Admin, then Single sign-on. The setup sequence is Connect your Microsoft organization, Grant access in Microsoft, Choose your sign-in policy, and Test, then enable. Connecting uses a Microsoft work account to identify the tenant; a Microsoft administrator may also need to open Microsoft admin consent.

After selecting the automatic-account, existing-account-linking, default-role, and allowed-domain policy, select Save policy. Enable Show “Continue with Microsoft” for your organization and test from a private or incognito window. TankActive records when a Microsoft sign-in succeeds.

Require Microsoft sign-in blocks password login for non-owners. That control remains locked until Microsoft sign-in is enabled and at least one login has succeeded, reducing the risk of enforcing an untested configuration.

What do common sign-in messages mean?

• Microsoft sign-in is disabled for this organization: ask an organization administrator to enable it.
• Your Microsoft account is not linked: ask an administrator to create or link the TankActive user.
• This Microsoft account belongs to a different organization or is not allowed: use the work account and direct sign-in link for the intended TankActive organization.
• Microsoft sign-in was canceled, expired, or already used: return to the sign-in page and start Continue with Microsoft again.
• Your TankActive account is inactive: an administrator must reactivate it from Users & Access.