Microsoft Entra SSO for Telematics Guru

Telematics Guru supports Single Sign-On (SSO) using Microsoft Entra ID (formerly Azure AD). This allows organisations to manage access to the Telematics Guru web app using their existing Microsoft 365 or Entra tenant.

This feature is currently at MVP stage and requires assistance from the Telematics Guru support team to enable. A fully self-serve configuration model will be introduced in a future release.
 

How the New Login Experience Works

The Telematics Guru login screen has been updated.

 

Users must now enter their email address first. The system then determines whether the user should:
 

• Proceed with Microsoft SSO, or
   
• Continue with a password (if SSO is not enabled for their organisation).
   

For organisations with Microsoft SSO enabled, users will be redirected to authenticate via Microsoft after entering their email address.
 

How It Works (Technical Overview)
 

Microsoft SSO integration uses OpenID Connect for authentication and requests basic identity scopes only (such as email, profile, and user identifier).
 

• No Microsoft Graph write access is requested.
   
• Telematics Guru does not access mail, files, calendars, or directories.
   
• No customer-managed app registration or client secrets are required.
   

During the first successful sign-in, Microsoft Entra automatically creates an Enterprise Application (Service Principal) for Telematics Guru within your tenant.
 

Requirements
 

Microsoft Business Account
 

A Microsoft Business or Enterprise account is required.
 

• Personal Microsoft accounts (for example @outlook.com or @hotmail.com) are not supported.
   
• Organisations using Microsoft 365, Azure, or Entra ID already meet this requirement.
   

Microsoft Entra Tenant
 

An Entra ID tenant is required for authentication.

Most organisations already have a tenant if they use Microsoft 365 or Azure. If a tenant does not exist, one can be created via the Microsoft Entra admin center: Create a new tenant.

Adding a custom domain (for example @yourcompany.com) is recommended but not mandatory: Add a custom domain.
 

Implementation Process (MVP)
 

Step 1: Provide Tenant ID to Telematics Guru Support
 

Provide the Telematics Guru support team with your organisation’s Microsoft Entra Tenant ID.

This can be found in the Entra admin center under:

1. Entra ID
    
2. Overview
    
3. Tenant ID
    

Telematics Guru will use this Tenant ID to enable Microsoft SSO for your organisation on the back-end, you will then be notified when it is ready to test.
 

Step 2: First Admin Sign-In (Triggers Consent)
 

Admin approval is automatically triggered during the first Microsoft sign-in attempt. This is the recommended and supported setup flow.
 

1. Navigate to the Telematics Guru login page.
    
2. Enter your work email address (this must exactly match the user’s email address in Telematics Guru).
    
3. Select Sign in with Microsoft.
    
4. Authenticate using your Microsoft account.
    

If your organisation restricts user consent, you may see a message indicating that approval has been sent to your administrator.

• A Microsoft Entra administrator will receive a consent request.
   
• The admin approves the application once per tenant.
   
• After approval, users in the organisation can sign in using Microsoft SSO.
   

Before the first Microsoft sign-in attempt, the Telematics Guru application may show no permissions in Microsoft Entra. This is expected behaviour. Permissions are only created after the first authentication request is made.
 

Step 3: Manual Admin Approval (If Required)
 

Some organisations disable the automatic admin consent request flow.

 

If login is blocked, an Entra administrator can manually approve access:

1. Open Microsoft Entra admin center.
    
2. Navigate to Enterprise Applications.
    
3. Locate Telematics Guru.
    
4. Review and approve the application.
    
5. Optionally assign users or groups if required by your tenant policies.
    

Once approved, users will be able to log in via Microsoft SSO.
 

User Management Considerations

• Users must already exist in Telematics Guru with an email address that exactly matches their Microsoft Entra account.
   
• Telematics Guru does not automatically create users during Microsoft SSO login.
   
• SSO will be enabled for all users who have the organisation set as their Home organisation.
   

It is strongly recommended that at least one Microsoft Entra administrator account is verified to work before rolling SSO out to all users.
 

Next Steps

To begin enabling Microsoft Entra SSO for your organisation, contact the Telematics Guru support team and provide your Microsoft Entra Tenant ID.

For broader integration capabilities within the platform, see the GraphQL API for Telematics Guru and related integration guides.