Microsoft Entra ID Single Sign-On

The main highlight of this release is the introduction of Microsoft Entra ID login support, making it possible to use secure single sign-on with Microsoft 365 and Entra ID accounts in CIMCO MNT. This allows users to sign in with their existing company credentials while keeping the standard MNT session and workflow unchanged.

The implementation is based on the Authorization Code flow with PKCE, providing a modern and secure login method. Microsoft tokens are validated by the system before a normal MNT session is created, ensuring that the new login method integrates cleanly into the existing authentication flow.

Flexible and Secure Authentication Setup

The new Entra integration includes flexible configuration options for tenant ID, client ID, client secret, and allowed domains. Domain restriction makes it possible to control which Microsoft accounts can be used, while optional auto-provisioning allows new users to be created automatically on first login with a predefined default role.

To simplify setup, MNT now also includes a built-in Test Connection tool, making it easier for administrators to validate configuration and confirm that the Entra connection is working correctly. Redirect handling has also been designed to work reliably in reverse proxy environments.

Improved Login Experience

From the user perspective, the login page now includes a new Sign in with Microsoft button, making access easier and more familiar for organizations already using Microsoft 365. Clearer error messages have also been added for common login issues, helping users and administrators troubleshoot authentication problems more efficiently.

At the same time, the system preserves flexibility by allowing local login to remain available. The master admin always retains local login access as a fail-safe, and installations can also support fallback to local admin login when needed.

Backward Compatibility and Technical Improvements

This feature is fully backward compatible and does not require database changes or migration. Default login mode remains local, and Microsoft Entra ID login stays inactive until it has been configured. This makes it possible to introduce single sign-on without affecting existing customers or current login workflows.

In addition to the Entra functionality itself, the release also introduces a new backend OIDC service and endpoints, along with improved cookie handling and more reliable refresh token behavior across login types. Token handling has been implemented securely, with no exposure of sensitive token data in server logs.

Together, these updates make CIMCO MNT easier to integrate into Microsoft-based IT environments while improving login security, flexibility, and administrative control.

Release notes

Please see the release notes under the Download section.

As always, we appreciate your feedback and suggestions. If you have any questions or comments about CIMCO MNT, please feel free to reach out to us.

The CIMCO MNT team