Skip to main content
Print

You can enable single sign-on in Day Off in a few steps. SSO allows employees to access Day Off without creating separate passwords. They can log in using their existing Microsoft work accounts, making access faster and more secure.

Steps to Enable Single Sign-On

To set up SSO in Day Off:

  • On the web version, go to Settings & integrations → Security
  • Click the Single sign-on card
  • Enable the SSO
  • Click on Setup for microsoft
  • Follow the setup instructions and grant required permissions
  • Save and activate

Once enabled, users can sign in using their Microsoft accounts.

Day Off app feature showing employee leave tracking, PTO management and absence scheduling – Day OffDay Off

How It Works for Users

  • Employees will see the Microsoft login option on the login page
  • They can log in using their work Microsoft account
  • No need to create or remember separate passwords
Day Off app feature showing employee leave tracking, PTO management and absence scheduling – Day OffDay Off

Why Enable Single Sign-On

Passwords are one of the most common security weak spots. With SSO, employees use one trusted work account instead of yet another password. As a result, there are fewer forgotten passwords and fewer reset requests.

It also gives IT more control. Since people sign in with their company account, access follows the rules your IT team already manages in Microsoft.

For employees, the experience is simple too. They click the Microsoft option on the login page and continue with the account they already use every day.

Tips Before You Turn It On

  • Make sure you have admin access in Day Off, since the setting lives under Settings & integrations → Security.
  • Have someone ready who can grant the required Microsoft permissions during setup.
  • Remind employees to use the same email that is linked to their Day Off profile.
  • Tell your team about the new login option before you activate it.

Your company uses Google Workspace instead? Read about Google SSO in Day Off. You can also give your team a branded login address with a custom domain.

On this page