Quick Tips

Quick Tips #4: Enabling SSO

ManagementStudio Quick Tips

Written by Matt Walker

Matt is a product specialist, content creator, and web geek at ManagementStudio. When he's not helping customers to streamline their transformation and ops, you'll find him with his head in a recipe book, getting nostalgic over old film cameras, or discovering new mountain bike trails with his children.

February 21, 2023


Reading Time: ( words)

Single sign-on is an authentication method that improves system security, reduces password management, and improves the user logon experience. But did you know that you can use your Microsoft Active Directory credentials to sign in to ManagementStudio, too?

In this Quick Tip, we’ll show you how to configure ManagementStudio to use Windows authentication and streamline the sign in process for your users.

Prepare AD

ManagementStudio uses the concept of Role Groups to define levels of access within the system. By creating groups in AD that mirror the Role Groups in ManagementStudio, you’ll easily be able to add new users by simply adding them to the appropriate group in AD.
Start by creating AD groups for all the roles that you want to manage in ManagementStudio. For example, you might want AD groups for:

  • Project Member
  • Admin Users
  • Packagers
  • Power Users

Once you have created all the groups that you need, go ahead and add your users.

Note: The Project Member Role Group is required for all users in ManagementStudio and must have an equivalent in Active Directory.

Configuring ManagementStudio

The next step is to link the AD groups created previously to the relevant Role Group in ManagementStudio.  Let’s start by updating the Project Member Role Group:

  • Switch to Administration and load Role Groups
  • Select Project Member
  • Click Edit Rules (#1 in the image below)
Editing the Role Groups in ManagementStudio
  • Add the name of the AD group for Project Member in the AD Group column (#1 below)
  • Tick AD User Source to allow users to be created (#2)
  • Click Finished (#3)
Specify the AD group to be linked to the Role Group
  • Repeat the previous steps for all the AD groups that will be linked to Role Groups in ManagementStudio.
  • Once you’ve finished, click Save (#1 below) and Sync AD Group-Roles (#2)
Save Role Groups and Sync with AD

Logging In

That’s it! You can now use the AD groups to govern who has access to ManagementStudio. To create new user accounts in ManagementStudio, simply add the users AD account to the appropriate AD group and tap Sync AD Group-Roles again!

Signing in to ManagementStudio with your AD credentials is easy, too.  When you first launch the client, select Windows Authentication from the Sign In options.

Log in with Windows Authentication

Final Thoughts

Using Windows authentication to sign in to ManagementStudio reduces the daily administration to add or remove users, reset passwords or change application permissions, and can become part of your organisations joiners, movers, leavers process.

We have a handy Solution Article that covers the configuration in more depth, but don’t hesitate to get in touch with our support team if you’re planning to switch to SSO or have any issues.

You Might Also Like

Quick Tips #5: Keyboard Shortcuts

Quick Tips #5: Keyboard Shortcuts

Using keyboard shortcuts can be an effective way to save time while working with ManagementStudio. To help you boost...

Quick Tips #3: Customising Icons

Quick Tips #3: Customising Icons

I'm sure you've noticed the rather nice-looking icons in ManagmentStudio, but did you know that you can also change...