Team sign-in with Microsoft

Connect your company's Microsoft Entra directory, and your team signs in to Gelim with their work account. You can also require it, so team work waits until each person has signed in with Microsoft recently.

What you need

• To be the team's Owner, with your own verified email on the team's domain.
• Access to your company's Microsoft Entra admin center.

1. Register Gelim in Microsoft Entra

In Entra, create an app registration:

1. Supported account types: Accounts in this organizational directory only.
2. Platform: Web, with the redirect URI that your team's Sign-in tab shows (copy it from there).
3. Optional ID-token claims: auth_time, email, xms_edov.
4. Delegated permissions: openid, profile, email.
5. Create a client secret.

2. Connect it to your team

In account.gelim.ai, open Teams → Sign-in and choose Connect Microsoft Entra for this team. Enter a connection name, your team's email domain, the Directory (tenant) ID, the Application (client) ID, the client secret and a short reason.

3. Test it

Choose Sign in with team SSO to try it yourself. From now on, anyone who enters an email on your domain goes straight to Microsoft.

4. Require it (optional)

Under Required sign-in, turn on Require SSO for this team and choose how often members must sign in with Microsoft: every 1 to 30 days. Gelim asks you to sign in with Microsoft yourself first.

What your team sees

When their Microsoft sign-in is due, each app says so and offers one button.

Until then, answers, recordings and Actions for the team wait. Personal use isn't affected.

Limits and notes

• Microsoft Entra is the only provider today.
• Update client secret on the Sign-in tab replaces an expiring secret.
• If someone already has a Gelim Account with the same email, they can link it by entering their password once. Accounts are never merged on their own.

Next steps

• Team members and roles: who can do what.
• Troubleshooting: when sign-in doesn't work.