Staff sign in with their work account; you end access in one place
Single sign-on with Microsoft Entra ID, and SCIM provisioning that keeps FSM Navigator® accounts and roles in step with your directory.
14-day free trial · Nothing charged until the trial ends · Cancel online anytime; access continues to the end of your paid period
The technician who left is still signed in
A technician leaves on a Friday. IT disables his Microsoft account the same afternoon. On Monday he can still open the field service app on his personal phone, because that app has its own password and nobody remembered it.
For an IT team, every app with its own login is one more place to forget. Single sign-on fixes the sign-in. Provisioning fixes the forgetting.
Sign in with a Microsoft Entra ID work account
On the Enterprise plan, your staff sign in to FSM Navigator with their Microsoft Entra ID work account, the same one they use for email and Teams. FSM Navigator connects to Entra ID using SAML, and your company uses its own verified domain for it.
People who already have an FSM Navigator account are linked to their Microsoft account, not duplicated, so roles and work history stay with them.
SCIM keeps accounts in step with Entra
New hire
An account is created in FSM Navigator when the person is added in Entra.
Change
Name and group changes in Entra update the account.
Leaver
The account is deactivated and the seat freed. There is no separate offboarding step in FSM Navigator.
Roles from groups
Entra groups map to FSM Navigator roles, so a new dispatcher added to your dispatch group gets the dispatcher role.
Mapping groups is set up in the single sign-on guide, which also covers the Microsoft licence that assigning groups to an app needs.
Optional or Required sign-in
Roll it out at your own pace. Set sign-in to Optional while you test with a few people, so everyone else keeps signing in the way they do now. Switch to Required when you are ready, and staff on your verified domains sign in through Microsoft.
An emergency administrator for the bad day
If Microsoft sign-in is unavailable, someone still needs to get into the account. Setup begins with an emergency administrator who signs in outside single sign-on, with a passkey or with a password and an authenticator app. It uses no seat, and the other Owners and Administrators are alerted whenever it is used.
What is supported and what is not
Supported
- Microsoft Entra ID in the commercial Microsoft cloud
- SAML single sign-on, Optional or Required
- SCIM: create, update and deactivate staff accounts, and map groups to roles
- An emergency administrator outside single sign-on
Not supported
- Other identity providers
- Guest (B2B) accounts in Entra ID
- Sign-in names on an onmicrosoft.com domain; staff need an address on your own verified domain
- The Microsoft government and China clouds
Setting it up
The Owner or an Administrator sets up single sign-on, working with whoever administers your Entra ID tenant. The single sign-on guide walks through it step by step, from the emergency administrator to verifying your domain and turning on provisioning.
Single sign-on sits on top of what every plan already includes. See the security page for the overview and the data processing agreement for contract terms. Planning for a bigger team? Read about field service software for large teams, and see the other integrations on Enterprise.
Which Plans Include Single Sign-On
Single sign-on and SCIM are on Enterprise. Paid plans have no user limit. Current prices are on the pricing page.
Single sign-on, answered
Which identity providers does FSM Navigator support for single sign-on?
Microsoft Entra ID in the commercial Microsoft cloud, using SAML. Other identity providers, and the Microsoft government and China clouds, are not supported.
What is the difference between single sign-on and SCIM?
Single sign-on controls how people sign in. SCIM controls whether they have an account at all: it creates, updates and deactivates FSM Navigator accounts to match Entra ID, and maps Entra groups to roles.
What happens to someone's account when they leave the company?
When they are removed from their groups in Entra, SCIM deactivates their FSM Navigator account and frees their seat. Their work history stays.
Can guest users sign in with single sign-on?
No. Guest (B2B) accounts in Entra ID are not supported, and neither are sign-in names on an onmicrosoft.com domain. Staff need an address on your company's own verified domain.
What if Microsoft sign-in stops working?
Your emergency administrator signs in outside single sign-on, with a passkey or with a password and an authenticator app. The other Owners and Administrators are alerted whenever it is used.
Can I roll it out gradually?
Yes. Leave sign-in Optional while you test, so people can still use their password, then switch to Required when you are ready.
Which plan includes single sign-on?
Enterprise. You can try Enterprise free for 14 days. Single sign-on is suspended if the company leaves the Enterprise plan.
Let Your Directory Decide Who Has Access
Single sign-on and SCIM provisioning for Microsoft Entra ID, on the Enterprise plan.
14-day free trial · Single sign-on is included on Enterprise