Logging in & switching accounts
Can I log in with password + MFA if my company has SSO enabled?
- No, if your email domain is SSO-enforced, you must log in with SSO.
- Yes, if your email domain is not SSO-enforced, you can still use password + MFA.
What happens if I log in with password but also have access to an SSO-enforced company?
- You will log in with password and MFA as long as your email domain has not been enforced to login with SSO.
- You can switch to an SSO-enforced company without needing to re-authenticate.
What happens if my company enables SSO after I've been using password + MFA?
- Once SSO is set up and your login email domain is SSO-enforced, you must use SSO to log in—password login will no longer be available.
- The next time you log in, Budgetly will redirect you to Microsoft Entra ID for authentication.
Account deactivation & removal
What happens if I am removed from Microsoft Entra ID?
Loss of access to Budgetly
- If your Microsoft Entra ID account is removed, you will immediately lose access to Budgetly.
- Your authentication via SSO will no longer work.
How to restore access
- If you still need access, your company admin must restore your Microsoft Entra ID account.
- Once restored, you will be able to log in again using SSO.
What if my Entra ID account cannot be restored?
If your Entra ID access cannot be restored but you still have access to other Budgetly accounts, consider these options:
- Ask your company admin to remove your email domain from the SSO-enforced domains list (only applicable if your email domain is not the company's primary domain).
- Request access to active companies using a new email domain (this will require a new invite from your company admin).
What happens if I am deactivated from a Budgetly company account?
Loss of access to the Budgetly company account
- You will immediately lose access to the Budgetly account you were deactivated from.
- If your email domain is SSO-enforced, you will no longer be able to log in to that company's Budgetly account
What if I still have access to other companies?
- If you have access to other Budgetly accounts, you can still log in and switch between them as usual.
- If your email domain is SSO-enforced, you will continue using SSO to access your other accounts.
- If your email domain is not SSO-enforced, you will continue using password + MFA.
How to regain access
- Contact your company admin to check if you can be reactivated.
- If reactivation is not possible, you may need to request access using a new email domain.
SSO configuration & troubleshooting
How do I reconfigure my SSO connection?
If your SSO settings need to be updated:
- Disconnect the existing SSO configuration from Budgetly Settings > Security > SSO.
- Reconnect SSO and ensure that the configuration settings are valid.
- Save the configuration and test authentication.
How do I test the Entra ID SSO connection?
Perform a live SSO login test
- Log out of Budgetly.
- Navigate to budgetly.io/login.
- Enter your email.
- If the domain is SSO-enforced, you should be redirected to the Microsoft login page.
- Sign in with your Microsoft Entra ID credentials.
- If login is successful, you will be redirected back to Budgetly.
I am locked out of my Budgetly account due to an SSO issue. What should I do?
- If you are an admin and cannot log in with SSO, contact another company admin to verify your active status in both Budgetly and Entra ID, or contact Budgetly support.
- If you are a user and cannot log in with SSO, contact your company admin.
Possible causes:
- Your email address in Budgetly does not match your email address in Microsoft Entra ID.
- Your IT admin removed your Microsoft Entra ID account.
- Your user account in Budgetly is deactivated
- Your SSO settings in Entra ID have changed, preventing authentication.
- Your company's SSO connection is misconfigured in Budgetly.
If you encounter any issues, review the SSO logs in Entra ID to identify the cause. If you can't resolve the issue, contact your IT admin or Budgetly support.
Budgetly support can temporarily disable SSO, allowing you to log in with password + MFA until the issue is resolved.
User invites & onboarding
How does the user invite process work?
- The user receives a "Get Started with Budgetly" notification via email.
- They open Budgetly where
- Budgetly checks if their email domain is SSO-enforced:
- If yes, they are redirected to SSO login.
- If no, they set a password and use MFA.
- After login, they will return to Budgetly to finish setting up their account with instructions on how to install the Budgetly mobile app.
What happens if I receive an invite but my email is SSO-enforced?
- You will be redirected to log in with SSO (Microsoft Entra ID).
What happens if my email is not part of an SSO-enforced domain?
You will set a password and log in.
Can an invited user login without completing the setup?
No, users must complete the invite process before accessing Budgetly.
What happens after a new user logs in with SSO?
After accepting the terms of service, new users will be directed to log in with SSO. Once authenticated through SSO, they will return to Budgetly to finish setting up their account.