Alternate SSO Login

What is Single Sign-On (SSO)?

Single Sign-On (SSO) lets you log in to the Medical Collection Group client portal using the same corporate credentials you already use to sign in to your company's network and applications. There is no separate password to remember and no additional MFA step on our site — your company's identity provider has already verified who you are.

Medical Collection Group is implementing SSO using Microsoft Entra ID (formerly Azure Active Directory), the industry-standard identity platform used by most enterprise organizations.

How Our Microsoft Entra Approach Works

We use a multi-tenant Microsoft Entra application that allows each client company to federate their own Entra tenant with our portal. Here is how the sign-in flow will work for your users:

1. Click "Alternate SSO Login" — From the login page, your users select the SSO option instead of entering a password.
2. Redirect to Microsoft — The user is securely redirected to the Microsoft Entra sign-in page for your company's tenant.
3. Your company validates the user — Your Entra tenant authenticates the user using your existing policies (password, MFA, conditional access, device compliance, etc.).
4. Return to MCG — Once your tenant confirms the user's identity, Microsoft returns a signed token to our portal and the user is logged in. The user's email address from your Entra directory is matched to their MCG contact record.
5. You stay in control — If you disable a user in your Entra tenant, that user is automatically blocked from signing in to the MCG portal. No separate offboarding step is required on our side.

Benefits for Your Company

• One less password — Your team uses the same credentials they use everywhere else at your company.
• Stronger security — MFA, conditional access policies, and device compliance enforced by your Entra tenant automatically apply.
• Centralized access control — When an employee leaves your company, removing them from Entra immediately removes their access to the MCG portal.
• Audit visibility — Sign-in events are visible in your Entra sign-in logs alongside the rest of your company's authentication activity.
• No password resets — Users no longer need to manage a separate MCG password or call us for password help.

What We Will Need From Your IT Team

Once SSO is active, onboarding your company is a one-time setup:

• Your Microsoft Entra tenant ID (a GUID).
• A list of the email domains your users sign in with (for example, yourcompany.com).
• Administrator consent for the Medical Collection Group Entra application in your tenant (a one-time approval).
• Confirmation of which existing MCG contacts should be SSO-enabled.

We will publish step-by-step instructions and an admin consent link closer to the August 1, 2026 launch date.

Questions About SSO?

If you would like to be notified when SSO is available, or to schedule your company's onboarding, please contact the MCG Administration Team: