QPlay – SSO Guide (Simple & Advanced)
WHAT IS SSO?
Single Sign-On (SSO) allows users to log in to QPlay using their Microsoft account or email and password – without having to remember multiple credentials. Q-Play supports both a Simple and an Advanced SSO configuration.
Difference between Simple and Advanced SSO
Simple SSO lets you manually switch a user’s login to Google or Microsoft. It requires no technical setup and is ideal for smaller organizations.
Advanced SSO connects QPlay directly with Microsoft Azure AD, automatically assigning access based on Azure group membership. It requires activation and setup but enables fully automated access control.
WHO IS THIS GUIDE FOR?
This guide is aimed at administrators, IT managers, and technicians who need to configure SSO in QPlay – either for the first time or to transition from standard login to Microsoft login.
PART 1 - SIMPLE SSO
This solution is ideal if you:
Want to switch from standard login to Microsoft login.
Have a small number of users and no need for group-based permissions.
Want to provide a quick and easy way for users to log in with their Microsoft account.
Step-by-step:
Step 1: Go to “Users & Teams”
Once logged into QPlay, click your profile picture in the top right corner and select Users & Teams from the dropdown menu.
Step 2: Find the user you want to change the login method for
In the user list, click the edit icon under the Login method column next to the relevant user.
Step 3: Change login method
A pop-up window will appear showing the current login method. Under Select new login method, you can choose between:
Google
Microsoft
The system will notify you that the user must now log in using the selected platform.
Step 4: Confirm the change
Click “Save changes” to apply the new login method.
Step 5: User receives email confirmation
Once the login method is updated, the user will receive an email with information about the new login method:
If changed to Microsoft login: the user is instructed to log in via Microsoft.
If changed to Google login: the user is instructed to log in via Google
The user also receives a separate email allowing them to reset their password if necessary.
Step 6: User logs in with the selected method
Going forward, the user can log into QPlay using the selected method (Microsoft or Google). No new password is needed if an external provider is used.
Change back to email/password login
If you later want to revert to email/password login, go to Users & Teams and change the login method. The user will receive a password reset email.
PART 2 - SETTING UP ADVANCED SSO IN QPLAY
Advanced SSO allows you to create a direct connection between your users’ Azure groups and their QPlay teams, enabling access and role management to be handled centrally from Microsoft Entra ID (Azure AD).
🔐 IMPORTANT: Advanced SSO must be activated first
This feature is not enabled by default. Please contact NordicScreen Support to have Advanced SSO enabled on your QPlay account.
This guide is relevant if you:
Use Microsoft Azure AD as your identity platform.
Want QPlay access rights to be assigned automatically based on AD groups.
Want to avoid manually creating and maintaining user access in QPlay.
Step-by-step:
Step 1: Open Account Settings
After Advanced SSO is activated by NordicScreen, go to Account Settings and click on the “Single Sign-On (SSO)” tab.
Step 2: Add an IDP Group Mapping
Click the plus icon (+) to create a new link between an Azure group and a QPlay team.
Log into your Microsoft Azure portal, go to Azure Active Directory > Groups, and find the appropriate group. Copy the value from the Object ID column – this will be used as the IDP Group ID in QPlay.
Step 5: Create the IDP Group Match
Back in Q-Play, paste the copied Object ID into the IDP Group ID field. Then select the QPlay team to which users in this Azure group should be linked.
Step 7: Verify the connection
Step 8: Edit an existing group mapping (optional)
You can always edit an existing mapping by clicking on it. A pop-up will allow you to update the group ID or QPlay team.
Step 9: Use Fallback Team as a safety net
If a user logs in via Azure AD but does not match any of the defined Azure groups, QPlay will automatically assign them to the selected Fallback Team.
Summary
With Advanced SSO, you gain:
Automated group-based access control
Synchronization between Microsoft Azure and QPlay
Centralized and simplified user management
Need Help?
If you have any questions about SSO setup, don't hesitate to contact NordicScreen Support. We're happy to assist you.
Related Articles
Guide to Integrating PowerPoint from OneDrive into Q-Play
Welcome to this step-by-step guide that will help you display updated PowerPoint slides directly on your QPlay information screen. Follow these instructions for seamless integration, ensuring your presentation is always dynamic and up-to-date. Before ...Guide to Integrating Excel from OneDrive into Q-Play
Welcome to this step-by-step guide that will help you display updated Excel directly on your Q-Play information screen. Follow these instructions for seamless integration, ensuring your presentation is always dynamic and up-to-date. Before You Start ...Guide to Accessing Q-Cal via Q-Play
This quick guide shows you how to easily log into your Q-Cal account via Q-Play. Follow the simple steps to access your appointments and settings without hassle. What You Need A valid Q-Cal account. Your registered email and password for Q-Cal. 1. ...How to Use Advanced Settings in Q-Play's Playcontrol
1. Start by navigating to 'Players' in the main menu to overview your screens. 2. Choose the specific screen you want to configure advanced settings for. 3. Click on 'Advanced' to open a menu with advanced settings. 4. Here, you can make a number of ...General Video Guide
Below you'll find an installation and usage guide for optimizing and playing videos through various types of players, including external and built-in options. This guide includes recommendations for video sizes, using the conversion tool HandBrake, ...