Connecting Microsoft 365

Open Settings, then Single sign-on. A District or County finds the same item in its own menu. The Microsoft 365 section of the page shows the Microsoft 365 connections your organisation owns. Other sign-in providers are on the same page, below it.

You can only connect a directory that you are signed in to yourself. If the page says Add your Microsoft account first, press it, sign in with your work account from that directory, and you'll come back to the page. Your account is then linked to your Scout Suite login. The steps are in Signing in with Microsoft.

Press Connect Microsoft 365, choose the directory you signed in with, and press Connect. You can then choose:

Open now if you are the Microsoft 365 administrator. Microsoft asks you to approve Scout Suite, and then brings you back here.

Copy link for our IT admin if someone else looks after Microsoft 365. Send them the link. They don't need a Scout Suite account, only their Microsoft 365 administrator sign-in.

The approval asks for two read-only permissions: to read the organisation's name and verified domains, and to check that accounts still exist. Scout Suite does not read anyone's mail, files or calendar.

Once the approval is done, the page lists the verified domains of the directory, such as your organisation's own email domain. After you add a domain in Microsoft 365, press Refresh domains to pick it up.

A domain can belong to only one directory in Scout Suite at a time. If another organisation has already connected a directory that holds one of your domains, Scout Suite leaves that domain alone and tells you.

Disconnect stops Scout Suite using this directory. Every offer of it ends, and the organisations it was offered to are emailed. Scout Suite keeps the record for your history, and nobody's sign-in changes.

A District or County that has connected a directory can offer it to the organisations under it. A District offers to its Groups. A County offers to its Districts and to the Groups in them. A Group has nothing under it, so it never sees this.

Press Offer to organisations on the directory, tick the organisations you want, and press Offer. The admins of each one are emailed. Nothing is shared with an organisation until it accepts.

Press Leave under an offer you have accepted to stop being part of it. The offering organisation is told. You can't leave an offer you haven't accepted, so decline it instead.

The organisation that connected a directory can press Withdraw beside any offer under Offered to. The organisation that was offered is emailed, and the offer ends. The offer can be made again later.

If a Group moves to another District, a District moves to another County, or a Group or District is unlinked from its parent, any offer that no longer fits ends by itself. The admins on both sides are emailed, and the offer leaves Offered to us. Offer the directory again from the new District or County if you still want the Group to have it.

Every night Scout Suite asks Microsoft 365 whether each linked person's account is still turned on. If an account has been turned off or deleted, that person's Microsoft sign-in is marked as lapsed. If your organisation requires Microsoft sign-in, the person is then blocked from it until the account is turned on again, and turning it back on restores access at the next check.

Scout Suite reads only whether each account exists and is turned on, and the directory's verified domains. It does not read anyone's mail, files, calendar or sign-in history.

The person is emailed when their account changes. The admins of each affected organisation get one digest a day, listing the changes for that organisation. These are security notices, not automatic messages, so the Automatic messages setting does not stop them.