×
Self-managed cards with SSO-Import from Microsoft Entra ID

Self-managed cards with SSO-Import from Microsoft Entra ID

book reader icon
2 Minutes
facebook logo gray
blueskylogo gray
linkedin logo gray
mail logo gray

Not every company wants IT to create cards in bulk. Enterprise plans therefore offer a second model, in which employees take care of their own card.

Employees open your company's QR Code login page and sign in with their usual corporate credentials through single sign-on (SSO) and the emplyee's data is pulled from MicrosoftEntra ID. After login, they see exactly one thing: their own business card, which they can edit and manage the content themselves.
 
Administrators set the boundaries. Depending on your policy, you can restrict what employees are allowed to change, for example by limiting everyone to one design template for both the QR Code and the landing page. People keep their details current, while the corporate design stays untouched.
 
Behind the scenes, every employee gets their own user instance within your QR Planet account. This is the main difference from the Entra ID synchronization, where all cards are created in a single user instance. Outdated cards can be deleted manually, automatically via the API, or through MCP integration.

How to setup the SSO-Import feature

1. Log into your QR Code account (admin view)

Please log into your administrator account on our QR Platform.

Login

Login
Login Form

2. Create a user in your QR Code account

When the user overview, please click Create User and then log into the new user. 

Screenshot of User overview
Create a user for your business card template(s)

Create a digitial business card

Once logged into the user instance, please create your first business card. This card will be used as template for the imported cards, so it should have the full look and feel you are aiming for.

Screenshot Landing Page Editor
Create your template business card to be used for future imports.
We highly suggest using a CSS-template in your template business card, so future changes can be done centraly by editing the CSS-template.

Find more information on creating your first business card.

Connect your QR Code account to your Entra-ID

Now, please follow the instructions on connecting your MS Entra ID. Make sure to choose the 1:1-configuration (one QR account user per employee).

Screenshot MS Entra ID
Get in touch with your IT to set up the connection.
The article above contains technical details for IAM Admins or your IT department, managing Microsoft Azure Entra ID (Active Directory). Please get in touch with an IT expert on your end to help you in setting up the SSO connection. 

Enable profile pictures by setting up Opengraf 

a) Get and store your Client ID

Visit the tenant in question. In the Overview you will find the Application (client) ID. Copy and save it for later use.

Screenshot of Entra ID Client ID
Copy and save the Client ID.

b) Create a client secret

Go to Manage > Certificates & secrets and change to the tab Client secrets. Hit New client secret, choose a name and set an expiration date (max. 24 months).

Once the client secret has been created, please copy the Value (not Secret ID) immediatly and save it for later use.

Screenshot of EntraID client secret
Create and copy the client secret

c) Create an API permission

Next, please go to Manage > API permissions and click Add a permission. Select Microsoft Graph and then Application Permissions (NOT delegated).

Screenshot of Microsoft Graph
Choose Microsoft Graph > Application Permissions

Search for

  • User.Read.All
  • User.ReadBasic.All

Check both boxes and click Add permissions.

Screenshot of API permissions
Add an API permission

Then confirm Grant admin consent for QR Planet GmbH. Now, you should see two green checkmarks in the list of API Permissions.

Screenshot of granted API permissions
If everything worked out, you should see something like this.

d) Add the data into your QR Code account

Log into your QR Planet account, go to Account > SSO > EntraID Advanced Settings, and enter your previously saved Client ID and Client Secret Value.

Screenshot of QR Planet account settings
Enter your ClientID and Client Secret Value.

Set the template in your QR Code admin account settings

Please open your Account settings, navigate to Admin User Settings and choose your previously created Business Card Template in the appropriate field.

Screenshot of QR admin account options
Set your business card template for all SSO-users under Account > Admin User Settings

Below, you will see the process of creating a business card via SSO-Login from user perspective.

How to set up your personal business card via SSO

1. Visit the business card page and log in via SSO

Visit your company's business card site, as provided by your administrator, e.g. id.yourcompany.com. Once there, use the SSO Login button to proceed.

Screenshot of SSO-Login Page
Hit SSO Login to start the process.

2. Choose your personal company Microsoft account

Next, a pop-up will appear in the browser. Please pick your Microsoft account or enter new credentials. 

Screenshot of Microsoft "pick an account" popup
Choose a connected account or use another one.
Your data will now be fetched from MS Entra ID and transmitted into your personal digital business card user, while you will be forwarded to the business card editor.

3. Edit and/or save the content of your future business card

Finally, check your data, change what needs changing, add what needs adding - and save your business card. 

Screenshot of Landing Page Editor
Add, alter and save your business card.
You can always change your card at any time by revisiting your company's business card page and logging in with the same Microsoft account via SSO.
Last update 1 hour ago