Your users sign in with their organisation Microsoft account, with no password to create or remember.
SpotBooker recognises your Microsoft Entra ID directory. Once linked, everyone in your organisation gets in with one click, and their groups can drive their booking rights.
Turn on Microsoft sign-in. The configuration fields only appear once this option is ticked.
Your IT administrator finds it in the Azure portal, on the directory overview page. It is what tells SpotBooker these users are yours — one directory can serve only one SpotBooker workspace.
Leave empty to accept every address in your directory. Enter one or more domains to open it to some of them only, for instance to keep guest accounts out.
By default, anyone from your directory signs in straight away, with no admin rights. Turn automatic admission off if your directory also holds people who should not book: each first sign-in will then file an access request to approve.
Map a directory group to a SpotBooker group. At every sign-in the user joins the matching groups and leaves the ones they are no longer in. Groups you created by hand in SpotBooker are never touched.