This FAQ covers how SSO login works in Budgetly, what happens when access changes, and how to troubleshoot common issues.
Login and switching accounts
Can I log in with password + MFA if my company has SSO enabled?
Only if your email domain is not SSO-enforced. If your domain is enforced, you must use SSO.
What happens if my company enables SSO after I've been using password + MFA?
Once your email domain is SSO-enforced, password login is no longer available. You’ll be redirected to Microsoft Entra ID on your next login.
Can I switch to an SSO-enforced company from a non-SSO account?
Yes. You can switch without re-authenticating as long as you’re already logged in.
Account access
What happens if I'm removed from Microsoft Entra ID?
You immediately lose access to Budgetly. Your company admin must restore your Entra ID account to regain access.
What happens if I'm deactivated from a Budgetly company?
You lose access to that company. If you have access to other Budgetly accounts, you can still log in and switch between them.
Troubleshooting
I'm locked out due to an SSO issue. What should I do?
Contact another admin to verify your status in both Budgetly and Entra ID, or contact Budgetly support. Support can temporarily disable SSO so you can log in with password + MFA.
How do I test the SSO connection?
Log out, go to budgetly.io/login, enter your email. If your domain is SSO-enforced, you should be redirected to the Microsoft login page. Sign in and confirm you’re redirected back to Budgetly.
How do I reconfigure SSO?
Disconnect the existing SSO from Settings > Security > SSO, then reconnect with updated configuration settings.
User onboarding with SSO
How does the invite process work with SSO?
The user receives an invite email, opens Budgetly, and is redirected to SSO login if their domain is enforced. After authenticating, they complete their account setup.
Can a user log in before completing the invite?
No. Users must complete the invite process before accessing Budgetly.