Carevision SSO Implementation for Microsoft Entra

Setting Up Microsoft Entra for your organization

This process should be done by someone in the organization that has an account on the Entra organization that will be used for integration.

Integrating your organization through Entra can be done under the Settings menu of the CareVision management portal

Users can choose to add an SSO integration or modify an existing one on this page. To add, users just click on the Add Provider button on the top right corner of the page

Users can choose which provider to integrate with from the dropdown

Clicking the “Integrate” button will redirect the user to the Microsoft login page so that they can enter their details.

The screenshots are just sample representations of what you’re going to see on the screen. The actual values and texts may differ.

Once the user is authenticated, CareVision will automatically capture the user’s tenant ID and it will automatically link the current CareVision organization to that Microsoft Entra tenant.

Since CareVision allows an organization to have multiple tenants, users can have the option to modify the provider name to avoid confusions.

Enabling SSO for Staff

After integrating the organization to Entra, we can now start linking the staff’s account to their Microsoft account. This can be manually done to the staff’s profile page in CareVision

Under the “SSO CONNECTIONS” section, you can view and manage all SSO-related connections associated with the staff. To enable Microsoft Entra for the staff, just select the provider that the current organization is linked to, and enter the employee’s Microsoft Object ID in the “Subject” field.

Once saved, the staff can now use his Microsoft account to login to CareVision.

Note: The organization can have an option to batch import the Staffs’ Microsoft Object ID into CareVision. They just need to provide a csv file that maps the employee’s email, employee ID or CareVision User ID to their Microsoft account Object ID.

Logging-in to CareVision using Microsoft Account

If Microsoft Entra is linked and enabled for the staff, he can login to CareVision by using his Microsoft account. Users can just click the “Sign in with Microsoft” button in CareVision’s sign-in page.

This will redirect the user to the Microsoft Sign in page where users can either login using their Microsoft account or just pick one from the list if they are already signed in.

Similar flow and experience for authenticating users is implemented to CareVision’s mobile apps.