Microsoft 365 (work or school) sign in method needs consent from either user or user's home organisation admin. This guide illustrates the data transfer and process flow in connection with consent in both cases.
Data transferred in connection with consent (Suomeksi)
Consent enables sign in in with Eduuni-ID using the user's home organization for authentication. For this purpose, consent is needed to identify the user and retrieve the user's basic information.
Basic information transferred with the consent:
- User's unique identifier
- User's display name
- User's email
Depending on the settings of the user's home organization, the following information may also be transferred with the consent:
- User's phone number
- User's profile picture
- User's primary display language
Consent given by the end user
Any user of the organization can give consent for Eduuni-ID sign in, provided that it is not blocked by the user's home organization.
The user's view looks as follows if the user can give consent for Eduuni-ID sign in themselves:
If the user cannot give consent themselves, one of the following windows will appear depending on the settings of the home organization:
In this case, the administrator of the user's home organization must give consent. More information on this is provided in the following paragraph.
Consent given by the administrator of the home organization
The easiest way for the administrator of the home organization to give consent for Eduuni-ID sign in is as follows:
- Sign up/sign in at: https://id.eduuni.fi/
- Choose Microsoft 365 (work or school) as the sign in method from the list.
- Sign in with the administrator credentials of organisation in the Microsoft sign in window.
- Select the option "Consent on behalf of your organization".
Continue by clicking "Accept". Consent has now been granted for your organization, and users can use Eduuni-ID sign in.
