FAQ - SecureExchange & Microsoft Entra ID Integration

What is Microsoft Entra ID?

Microsoft Entra ID is Microsoft’s enterprise cloud-based identity and access management service.

Can we map roles or permissions from Entra to your app?
Yes. Admins can configure role mapping during the provisioning setup.

What if a user is removed from Microsoft Entra?
They’ll be automatically deprovisioned from SecureExchange.

What SSO authentication protocols are supported?
We support SAML 2.0 for secure SSO integration with Microsoft Entra ID.

Is multi-factor authentication (MFA) enforced?
MFA enforcement is handled by Microsoft Entra. If MFA policies are configured in the tenant, they will apply during login to our application.

Do we support multiple tenants?
Yes, we support multiple tenants.

Does this require any on-prem infrastructure?
No, the integration is fully cloud-based via SAML and SCIM.

How does a provider(level1) logs in to SecureExchange Admin Portal? Provider(level1 user) needs to login with username and password.

How does an Administrator user logs in to SecureExchange Admin Portal?Administrator user once approved by the provider user in the admin portal, can login via SSO using “Continue with Microsoft“ button on the login page.

How does an Advsior user logs in to SecureExchange Admin Portal? Advisor user logs in via SSO using “Continue with Microsoft“ button on the login page.

Can an administrator or advisor user be created or managed in the admin portal?No. All user creation and lifecycle management (provisioning, deprovisioning, updates) are handled centrally in customer’s Microsoft Entra ID tenant.