| Applicable to | Centro QMS/QMS Starter, Centro KMS, Centro ESSENTIALS (organisations using Microsoft sign-in) |
| NOT applicable to |
Quick answer: Set up Microsoft sign-in, and optionally automatic user provisioning, using the Centro Entra ID Implementation Guide. Once it's on, staff sign in with their Microsoft 365 account. Their name, job title and department come from Microsoft 365, which is why those fields are greyed out in Centro ASSIST.
Common set-up mistakes
Follow the Centro Entra ID Implementation Guide for the full steps. These mistakes come up often:
- Send us the Application (client) ID and Directory (tenant) ID from the app registration's Overview page. Don't send the enterprise application's Object ID. Using it causes the error AADSTS90002: tenant not found.
- Enter the redirect URI and home page URL without a forward slash at the end, and make sure the full /sign-in/redirect-from-azure path is saved.
- Users' email addresses must use the email sign-in domain you gave us.
Common questions
Why can't I edit a user's name, job title or department? With Microsoft sign-in, the person's Microsoft 365 profile is the source of truth for these fields, so they're greyed out in Centro ASSIST. Make changes in Microsoft 365 and they'll appear in Centro ASSIST the next time the person signs in, or at the next provisioning cycle if you use automatic provisioning. You don't need to delete or recreate the user, and their records (such as knowledge test results) are kept.
Do we have to set up automatic user provisioning? No, it's optional. Without it, Centro ASSIST creates each person's account the first time they sign in with Microsoft. With it (Part B of the implementation guide), Entra ID creates, updates and disables Centro ASSIST accounts for you.
New staff see "Only activated users can sign in here". By default, accounts created the first time someone signs in with Microsoft stay inactive until an administrator activates them. This is a security setting. Ask us to turn on instant access if you'd like new users activated automatically. Users who tried to sign in before then can be activated under People > Users.
Can staff use Microsoft sign-in on the mobile app? Yes. Make sure staff have the latest version of the Centro ASSIST app installed.
Can we test with a few users first? Yes. We can keep email and password sign-in available alongside Microsoft sign-in while you test, so the sign-in page shows both options. Tell staff to keep using email and password until you're ready. We can then switch off email and password sign-in on a date that suits you, or turn it back on later if needed.
Can the sign-in buttons be renamed? Yes. Contact us, for example to show "Microsoft sign in" and "Email sign in".
Related articles
Still need help?
Email support@centroassist.com.au or call 1300 420 171. Please include your organisation's Centro ASSIST web address (for example yourorganisation.centroassist.com.au) and a screenshot if you can.
If your Centro ASSIST subscription is through Ageing Australia, please contact Ageing Australia Quality Systems at quality@ageingaustralia.asn.au.