Proofsource and Entra ID: sign in once, join automatically
Connect Microsoft Entra ID and your team signs in to Proofsource with their work account instead of an email code. First-time people join the workspace on the role you choose, and Entra's provisioning service adds and removes them over SCIM with group-to-role mappings, so access follows your directory.
Proofsource and Microsoft Entra ID, in short
The facts, ready to quote.
- Stage
- Live for every workspace
- Connects with
- SAML 2.0 or OpenID Connect; SCIM 2.0 tenant URL plus bearer token
- Who can set it up
- Workspace owners and admins, with a step-up confirmation on every change
- Where it shows
- Settings, Single sign-on
- Disconnect
- Turn the connection off or remove it; people go back to email-code sign-in
- New people join as
- The role you choose, Member or Viewer
Why we love Microsoft Entra ID
In the makers' own words, from their own pages. Proofsource builds on it, never around it.
Sign in once, reach every assigned app
With Entra single sign-on, people use one set of work credentials and open every assigned application without signing in again, with admins controlling access from one place.
From learn.microsoft.comProvisioning that follows your directory
The Entra provisioning service talks SCIM 2.0 to create, update and disable people in your apps, and logs every operation so admins can see exactly what happened.
From learn.microsoft.comConditional Access as a policy engine
Conditional Access combines signals such as user, device, location and risk to decide whether to grant access or ask for more, turning zero trust principles into everyday policy.
From learn.microsoft.comHow Proofsource uses Microsoft Entra ID
Microsoft Entra ID single sign-on and SCIM provisioning for your Proofsource team.
- Connect
Add your email domain
An owner or admin adds the company email domain in Settings, Single sign-on. Proofsource shows the Entity ID and ACS URL, or takes an issuer, client ID and secret for OpenID Connect.
- Read
Trust the identity provider
Proofsource trusts the SAML metadata or OpenID Connect issuer from your Entra tenant and accepts only people whose work email is on the verified domain you added.
- Show
One sign-in for the whole team
Once SSO is on, everyone with an email on the domain signs in through Microsoft Entra ID instead of an email code, and first-time people join the workspace on the role you chose.
- Prove
Keep the roster honest
Entra's provisioning cycles keep Proofsource in step with your directory. Unassign someone in Entra and they are removed from the workspace and signed out everywhere, and Settings counts who is provisioned and active.
Set up Microsoft Entra ID in 4 steps
Add your domain in Proofsource
Open Settings, Single sign-on, pick SAML 2.0 or OpenID Connect, enter your email domain and choose whether new people join as Member or Viewer.
Add Proofsource as an Entra enterprise app
For SAML, copy the Entity ID and ACS URL into a new non-gallery enterprise application. For OpenID Connect, register an app and keep its issuer, client ID and secret.
Paste the federation metadata
Paste the App Federation Metadata URL (or the XML) into Proofsource and save. SSO turns on for the domain.
Add provisioning over SCIM
In the enterprise app's Provisioning tab, paste the SCIM base URL as the tenant URL and the bearer token as the secret token, then map Entra groups to Proofsource roles.
| Entra group | Proofsource role |
|---|---|
| SG-Growth-Leads | Admin |
| SG-Content | Member |
| SG-Agency-Guests | Client viewer |
What you unlock with Microsoft Entra ID
One sign-in
Your team signs in through your own identity provider instead of an email code.
Automatic joining
First-time people on your domain join the workspace on the role you picked, with nobody to invite.
Provisioning
SCIM 2.0 adds, updates and removes people, and removing someone signs them out everywhere.
Step-up on every change
Each SSO or SCIM change asks the person to confirm it is them first.
Group roles
Map identity provider groups to Admin, Member, Viewer, Client viewer or Product viewer.
Owner-only token
Only the workspace owner can create, replace or revoke the SCIM token.
Google AI OverviewsGoogle AI Mode
Questions about Proofsource and Microsoft Entra ID
What changes in Proofsource when I connect Microsoft Entra ID?
Everyone with an email on the verified domain signs in through Microsoft Entra ID instead of an email code, and first-time people join your workspace automatically on the role you chose, Member or Viewer. Nothing changes about your brands, scans or reports.
Who can set up single sign-on?
Only a workspace owner or admin can see and change it, and every change asks them to confirm it is really them. Members see a short explanation instead of an error.
What does Proofsource need from Microsoft Entra ID?
Proofsource needs your Entra federation metadata URL or XML, or the issuer, client ID and secret for OpenID Connect. For provisioning, Entra gets a SCIM tenant URL and a bearer token that only the workspace owner can create, replace or revoke. Entra passwords stay with Microsoft.
What happens when someone leaves my company?
Remove or unassign them in Entra and its provisioning service tells Proofsource over SCIM. They are removed from the workspace and signed out everywhere, while people already provisioned keep access if you only revoke the SCIM token.
How do I turn it off?
Open Settings, Single sign-on, and use Turn off to pause the connection or Remove to delete it. Your team goes back to signing in with an email code, and nobody loses their workspace or their history.
What does the Live stage mean here?
Single sign-on is generally available and open to every workspace, with nothing to switch on first.
How does single sign-on help my AI visibility work?
It gets the right people into Proofsource without friction, so fixes get approved, shipped and verified faster across ChatGPT, Perplexity, Claude and the other engines. Roles keep approvers, writers and clients in the lanes you set.
Which AI engines does Proofsource check?
Up to 10 depending on your plan: ChatGPT, Perplexity, Claude, Google AI Overviews, Google AI Mode, Gemini, Microsoft Copilot, Grok, DeepSeek and Meta AI. The free scan and trial run four.
Pairs well with Microsoft Entra ID
Put Microsoft Entra ID to work for your AI visibility.
Scan your brand, connect Microsoft Entra ID, and see what AI says about you on up to 10 engines.
Google AI OverviewsGoogle AI Mode