Federated SSO vs Microsoft Integrated Authentication #
- We use industry-standard OAuth 2.0 federation through Azure AD, based on linking a Microsoft / your organisation identity to a Gamma Portal account
- Your Azure AD becomes the authoritative source for authentication when a user links their accounts
- Each login attempt is validated against your Azure AD at the point of authentication to Gamma Portal
- This is a popular SSO pattern found in many SaaS portals and platforms
- Please note that we do not support on-premise AD and the below details refer to Azure AD/Entra.
Security and Access Controls #
- Your administrator has control over the permitted authentication methods for each user account
- Each account can be configured to allow: Portal credentials only, Microsoft SSO only, or any method
- For maximum security, we recommend configuring accounts to “Microsoft” where possible, which:
- Disables portal username/password authentication for those users
- Forces all authentication through your Azure AD
- Ensures your AD policies (e.g. MFA) are always enforced
- Once configured for “Microsoft” there is no potential to bypass Azure AD authentication by entering traditional Gamma Portal credentials – users MUST authenticate through your organization’s AD.
Employee Access Termination #
- ‘When you disable/delete a user in Azure AD who accesses the Gamma Portal only via Microsoft SSO, then the user can no longer authenticate/log in to Gamma Portal as the authentication request will be denied by your Azure AD.
- For clarity – while this will prevent them from logging in, it will not immediately terminate an existing Gamma Portal session.
Multi-Factor Authentication #
- MFA is enforced through your Azure AD Conditional Access policies leaving you in control of this requirement.
Summary #
Gamma has already implemented the integration with Microsoft identities and there’s no need for you to set up any additional federation or identity trust relationships.
The sign-in process is already using Microsoft accounts, so it’s essentially plug-and-play—you just need to configure user settings within Gamma.
