---
title: "Enable Single Sign-On (SSO)"
slug: "enable-single-sign-on-sso"
updated: 2026-09-08T06:07:40Z
published: 2026-09-08T06:07:40Z
canonical: "help.csgi.com/enable-single-sign-on-sso"
stale: true
---

> ## Documentation Index
> Fetch the complete documentation index at: https://help.csgi.com/docs/llms.txt
> Use this file to discover all available pages before exploring further.

# Enable Single Sign-On (SSO)

## Enable Single Sign-On (SSO)

Single Sign-On (SSO) allows eligible users to sign in without managing a separate BCE password. BCE uses Backplane (Microsoft Entra) to authenticate users.

- Navigate to the BCE **login page**.

![](https://cdn.document360.io/c578bb14-e570-4b6e-93ed-f6c5b8a2d8a1/Images/Documentation/login.jpg?sv=2026-02-06&spr=https&st=2026-10-26T12%3A27%3A45Z&se=2026-10-26T13%3A27%3A45Z&sr=c&sp=r&sig=tjvG9UlZ7UkcfrPfyxcfA5pxZxbElylUyIFSSFIXYYM%3D)

- Enter your **email address** with company domain in the email field.
- BCE uses the email address to determine the appropriate authentication method.

![](https://cdn.document360.io/c578bb14-e570-4b6e-93ed-f6c5b8a2d8a1/Images/Documentation/login userid(1).jpg?sv=2026-02-06&spr=https&st=2026-10-26T12%3A27%3A45Z&se=2026-10-26T13%3A27%3A45Z&sr=c&sp=r&sig=tjvG9UlZ7UkcfrPfyxcfA5pxZxbElylUyIFSSFIXYYM%3D)

- Select **Start Login**.
- To authenticate BCE performs one of the following actions:
  - If a prior authentication token is still valid, BCE uses the token and signs you in.
  - If no valid authentication token exists, BCE redirects you to your company's own Identity Provider (e.g., Microsoft Entra) for authentication.
- After successful authentication, BCE signs you in to the application.

> ![Note](https://cdn.document360.io/c578bb14-e570-4b6e-93ed-f6c5b8a2d8a1/Images/Documentation/Note.png?sv=2026-02-06&spr=https&st=2026-10-26T12%3A27%3A45Z&se=2026-10-26T13%3A27%3A45Z&sr=c&sp=r&sig=tjvG9UlZ7UkcfrPfyxcfA5pxZxbElylUyIFSSFIXYYM%3D)
> 
> Unless otherwise configured, new users to the BCE application will be assigned the Viewer role.

BCE continues to support managed users when a client organization has not shared its Identity Provider (IdP) information with CSG/BCE. These users authenticate through a CSG-managed Identity Provider and requires additional setup in conjunction with clients..

- Open the BCE **login page**
- Enter your **username** or **email address**.
- BCE displays the sign-in options.

![](https://cdn.document360.io/c578bb14-e570-4b6e-93ed-f6c5b8a2d8a1/Images/Documentation/non managed user credentials.jpg?sv=2026-02-06&spr=https&st=2026-10-26T12%3A27%3A45Z&se=2026-10-26T13%3A27%3A45Z&sr=c&sp=r&sig=tjvG9UlZ7UkcfrPfyxcfA5pxZxbElylUyIFSSFIXYYM%3D)

- Enter your **username** and **password**
- Select **Sign In**
- BCE authenticates you and opens the application.