Single Sign-On is now available in Insight

We've introduced Single Sign-On (SSO) with Microsoft 365 to Insight, giving schools and trusts a simpler and more secure way for staff to access their accounts.

Instead of maintaining a separate password for Insight, users can now choose Log in with Microsoft and authenticate using their existing Microsoft 365 account.

For schools and trusts that want to go further, administrators can also choose to require SSO, ensuring that users access Insight through their organisation's Microsoft 365 authentication rather than with a separate Insight password.

Why use Single Sign-On?

Schools increasingly rely on a wide range of cloud services, each potentially requiring another username and password. SSO helps reduce this complexity by allowing staff to use an identity that is already managed by their organisation.

There are some important security benefits too. Using Microsoft 365 authentication means schools can apply the security controls they already have around their Microsoft accounts, rather than relying on another standalone password.

This is particularly useful where schools have enabled multi-factor authentication (MFA) for Microsoft 365. The DfE says MFA must be enabled for staff accounts accessing cloud services, and its guidance specifically suggests considering SSO where staff access a number of different systems.

The NCSC similarly recommends that organisations favour corporately trusted SSO for online services where possible, alongside strong MFA.

In practice, that can mean:

• Fewer passwords for staff to remember - users can access Insight with the Microsoft 365 account they already use.

• Better use of your existing security controls - authentication takes place through Microsoft, allowing organisations to benefit from the protections configured for their Microsoft accounts.

• A simpler login experience - particularly for staff already signed into Microsoft 365.

• More consistent access management - using an organisation managed identity helps bring Insight into the same approach used for other cloud services.

Supporting the DfE's digital standards

The DfE's Digital and Technology Standards in Schools and Colleges encourage schools to move towards centrally managed identity and access management.

Its guidance says that cloud solutions should use identity and access management tools, providing users with a centrally managed account rather than requiring multiple separate passwords. It also recommends that schools consider SSO where staff access multiple systems.

Introducing Microsoft SSO to Insight makes it easier for schools and trusts to include Insight within that approach.

Available to all Insight customers

There’s nothing extra to purchase or enable to start using SSO.

Any Insight user with a Microsoft account can use Log in with Microsoft, provided the email address on their Insight account matches their Microsoft 365 email address.

Administrators can optionally take the additional step of selecting Require SSO for their school or trust. Once enabled, users accessing that organisation must sign in with Microsoft 365. For trusts, the requirement also applies to all schools within the trust.

When enabling this setting, administrators can email their users directly from Insight to let them know about the change. We recommend making the switch during a quieter period, as users currently signed in with a password will need to sign in again using Microsoft.

Getting started

You can start using Microsoft SSO immediately by selecting Log in with Microsoft from the Insight login screen.

If you're an administrator and would like to require Microsoft SSO across your school or trust, our help guide explains how to configure it and what to check before switching it on.

Read our Single Sign-On (SSO) help guide.