How to require Microsoft sign-in for your vendor users

If you'd like your vendor users to sign in only with their Microsoft account — instead of a username and password — you can enforce Microsoft single sign-on (SSO) from the Vendor Users page.
Before you start: you'll need Full Access permissions, and Microsoft sign-in must be connected for your organization (see Step 1 below) before you can turn off password sign-in.

Step 1 — Connect Microsoft sign-in

1. Go to the Vendor Users page and select your organization.
2. Click Configure SSO (the Microsoft logo button).
3. Sign in with your organization's Microsoft 365 Global Admin or Privileged Role Admin credentials when prompted.
4. You'll be redirected to Microsoft to grant permissions for the Nexetic Vendor Portal application — click Accept to continue.
5. You'll be returned to the portal with Microsoft sign-in now connected.

For the full one-time setup — including a sign-in link if no one in your organization can access the portal yet, and how to grant Microsoft sign-in access to your other users — see [Setting Up Microsoft Single Sign-On (SSO) for the Nexetic Portal].

Before you continue to Step 2: make sure every user who needs portal access has already been granted Microsoft sign-in access for your organization (see "Grant Access to Other Users" linked above). Anyone who signs in with a password today but hasn't been granted Microsoft sign-in access will lose access entirely once password sign-in is turned off.

Step 2 — Turn off password sign-in

1. Back on the Vendor Users page, the Password Login Enabled switch is now available.
2. Switch it off and confirm in the pop-up.

Once this is off:

• Your organization's users must sign in with Microsoft — password sign-in attempts will be blocked.
• Password resets and adding new password-based users are no longer available. New users get access automatically the first time they sign in with Microsoft via an invitation link.
• Anyone already signed in with a password stays signed in for a short while longer (up to ~20 minutes) before needing to switch to Microsoft sign-in.
   

Turning password sign-in back on

Switch Password Login Enabled back on at any time — it takes effect immediately.
 

Why is the switch sometimes greyed out?

Until Microsoft sign-in is connected (Step 1), the switch stays greyed out. This ensures your organization always has at least one working sign-in method before you disable the other.