{ "$schema": "https://doorjames.com/page-schema.json", "url": "https://doorjames.com/integrations/entra-id-sso/", "path": "/integrations/entra-id-sso/", "language": "en", "locale": "en", "type": "integration", "section": "integration", "title": "Entra ID & SSO", "headline": "Single sign-on with your identity provider", "metaTitle": "Entra ID & single sign-on | Door James by CGI", "description": "Sign-in through OpenID Connect with Microsoft Entra ID, Google or other OIDC providers. Groups drive permissions, domains control access, HTTPS and TLS are enforced throughout.", "summary": "Door James authenticates users through OpenID Connect against your organization's identity provider. Microsoft Entra ID and Google are preconfigured patterns; other OIDC providers can be set up. Group memberships from the directory drive whitelists, roles and booking rights; permitted domains control who can enter the organization at all.", "keywords": [ "Entra ID & SSO", "Door James" ], "updated": "2026-09-22", "product": { "name": "Door James", "vendor": "CGI Deutschland B.V. & Co. KG", "vendorUrl": "https://www.cgi.com/", "category": "Workplace management software", "subCategory": "Office management, desk booking, visitor management, space management", "url": "https://doorjames.com/", "pricing": { "currency": "EUR", "price": 2, "unit": "user/month", "minimumUsers": 250, "allModulesIncluded": true }, "hosting": [ "Google Cloud, Frankfurt (Germany)", "IONOS, Germany (option)" ], "languages": [ "en", "de", "fr", "nl", "es", "it", "pt", "fi", "fr-CA" ], "award": "German Innovation Award 2022", "rating": { "value": 4.4, "count": 45, "best": 5, "source": "Apple App Store", "storefront": "DE", "url": "https://apps.apple.com/de/app/door-james/id6444570436", "checkedOn": "2026-09-21", "googlePlayDownloadsMin": 10000 } }, "breadcrumbs": [ { "name": "Home", "url": "https://doorjames.com/" }, { "name": "Integrations", "url": "https://doorjames.com/integrations/" }, { "name": "Entra ID & SSO", "url": "https://doorjames.com/integrations/entra-id-sso/" } ], "facts": [ { "label": "Protocol", "value": "OpenID Connect" }, { "label": "Preconfigured", "value": "Microsoft Entra ID, Google" }, { "label": "Permissions", "value": "groups from the directory" }, { "label": "Transport", "value": "HTTPS and TLS enforced" } ], "features": [ { "title": "OIDC sign-in", "description": "The login happens at the identity provider; Door James receives only the claims it needs." }, { "title": "Groups and roles", "description": "Directory groups map onto area access, roles and booking rules." }, { "title": "Domains and whitelists", "description": "An organization can hold several permitted domains; addresses outside them do not get in." }, { "title": "Role-based permissions", "description": "From organization admin to a restricted reception role – rights are granted per role and location." } ], "sections": [ { "heading": "Why there is no separate login", "level": 2, "text": "A separate account per application stops being a convenience question in organizations above a few hundred employees and becomes a security risk: forgotten deactivations when people leave, duplicate master data, separate password rules. Connecting an identity provider avoids all three, which is why it is the recommended setup and the one we configure in most rollouts. Where an identity provider is not available, a one-time code by email or a passcode can be used instead – deliberately, per organization, rather than as a shadow directory that grows on its own." }, { "heading": "Groups as a control mechanism", "level": 2, "text": "The second, often underestimated effect concerns maintenance: when area access depends on directory groups, a team change automatically flows into booking permissions. Without that link every reorganization would have to be replicated in Door James – effort that in practice is skipped, which then leads to wrong permissions." } ], "faq": [ { "question": "Does Door James support Keycloak?", "answer": "Door James speaks OIDC generically, so Keycloak is technically compatible. We only make a production commitment after confirming the current development and testing status." }, { "question": "And SAML?", "answer": "SAML sign-in is supported and configurable in the Admin Panel: identity provider certificate, entity ID, NameID format, clock skew, signature requirements and separate service provider credentials for the member app and the panel. A successful connection test is required before the configuration can be saved. For a tender, confirm the specific scenario with us – but SAML itself is built, not planned." }, { "question": "Do we need SCIM for provisioning?", "answer": "Users are created at first login through OIDC; profile data and groups come from Graph. For different provisioning scenarios we discuss the available routes." }, { "question": "Are there local accounts?", "answer": "Connecting your identity provider is the recommended route, and it is what we set up in most rollouts. Door James also supports a one-time code by email and a passcode as sign-in methods – useful for locations without an identity provider, and the default for a fresh organization until an IdP is configured. Which method applies is set per organization, so if your policy rules out local sign-in, it gets switched off deliberately." } ], "related": [ { "title": "Microsoft 365", "url": "https://doorjames.com/integrations/microsoft-365/" }, { "title": "Security & hosting", "url": "https://doorjames.com/security/" }, { "title": "API & third party", "url": "https://doorjames.com/integrations/api-and-third-party/" } ], "alternates": { "en": "https://doorjames.com/integrations/entra-id-sso/", "de": "https://doorjames.com/de/integrationen/entra-id-sso/" }, "formats": { "html": "https://doorjames.com/integrations/entra-id-sso/", "markdown": "https://doorjames.com/integrations/entra-id-sso/index.md", "json": "https://doorjames.com/integrations/entra-id-sso/index.json", "jsonld": "https://doorjames.com/integrations/entra-id-sso/index.jsonld" }, "contact": { "email": "doorjames.support@cgi.com", "bookDemo": "https://meet.doorjames.app/public-schedule/99469a6d66d20f7fdd5ee19182a8f8bd", "demo": "https://doorjames.app/demo", "helpCenter": "https://help-center.doorjames.com/hc/door-james/en", "app": "https://wa.doorjames.app" }, "actions": [ { "type": "bookDemo", "name": "Book a demo", "url": "https://meet.doorjames.app/public-schedule/99469a6d66d20f7fdd5ee19182a8f8bd", "minutes": 30, "platform": "Microsoft Teams", "description": "A scheduled call with the Door James team, 30 minutes over Microsoft Teams, slot chosen by the visitor." }, { "type": "liveDemo", "name": "Try the demo yourself", "url": "https://doorjames.app/demo", "description": "Interactive demo environment of the Door James app, no sign-up." }, { "type": "contact", "name": "Contact us", "url": "https://doorjames.com/contact/", "description": "Contact form and email address." }, { "type": "email", "name": "Email", "url": "mailto:doorjames.support@cgi.com" } ], "citation": { "title": "Entra ID & SSO", "publisher": "Door James by CGI", "url": "https://doorjames.com/integrations/entra-id-sso/", "dateModified": "2026-09-22" }, "license": "Content © CGI Deutschland B.V. & Co. KG. Quotation and summarisation are permitted with attribution to Door James by CGI and a link to the source URL.", "generated": "2026-10-23", "wordCount": 508 }