Setting up AD Integration, Single Sign-On, and Email Whitelisting

Single Sign-On vs. CyberPilot app username and password

Automated user management and Single Sign-On

You can make your administrative work easier with AD integration and Single Sign-On. By integrating with your Microsoft Entra ID (formerly Azure AD) or Google Workspace, your users are automatically synced to the CyberPilot App and they log on to the platform with their usual Microsoft or Google login and password.

CyberPilot app username and password

It's not required that you use Single Sign-On. Your users can also sign in to the CyberPilot app with a unique CyberPilot app username and password.

Whitelisting

Regardless of how your user's login to the CyberPilot App, we always recommend that you whitelist emails from CyberPilot to prevent emails from getting stuck in spam folders.

Guides

We have two different setup guides, depending on how you want your users to login.

Guide for Microsoft Entra ID (formerly Azure AD) and Single Sign-On

Guide for setting up Google Single Sign-On

Guide for using a CyberPilot username and password

The guides will give you everything you need to do and know. But you can read more about AD integration and Single Sign-On below if you'd like.

About AD Integration and Single Sign-On

CyberPilot's user management integration consists of two parts:

AD integration: When a user is added to a specific group in your Entra ID or Google Workspace, the user is also added to the CyberPilot app. If the user is removed from your Entra ID or Google Workspace, the user is disabled in the CyberPilot app.
Single Sign-On (SSO): When the user exists in the CyberPilot app, they log on to the platform with their Microsoft or Google password.

Requirements (Microsoft Entra ID)

If you have configured multifactor authentication in Entra ID, then it will work with the CyberPilot App.
Users synchronized with the CyberPilot App must have User principal name (username), First name, Last name, and Email filled out in your Entra ID. Without this information they cannot be synchronized to the CyberPilot App.
User properties Company Name, Department, Manager, Country, Job Title, Mobile Phone, and Office Location can also be synchronized to the CyberPilot App.

The process for setting up User Sync and Single Sign-On

You must notify CyberPilot if you wish to use the Google or Microsoft integration and Single Sign-On and appoint the IT employee with the task of setting up the integration for you. Make sure that the IT employee has an admin user in the CyberPilot App.
CyberPilot assigns a subdomain to your account and lets you and the appointed IT employee know when it is ready.
1. When a subdomain is configured for your account, you use https://***.app.cyberpilot.io (replace *** with the subdomain) to login to the CyberPilot app.
2. You coordinate with your IT employee on what users should be added to the CyberPilot app.
3. On the planned start date your IT employee configures the CyberPilot app to synchronize with your user directory and to use SSO.
When your user sync and Single Sign-On is configured, you are responsible for setting up internal processes for assigning users to the group you have selected for the CyberPilot app.

Syncing users to specific groups or branches in the CyberPilot App

Any group in your Entra ID can be mapped to any group, branch, or the general account in the CyberPilot App.

In our guide, you can see the whole process for setting this up.

In order to sync your users to branches in the CyberPilot App, you must:

Have multiple groups in your Entra ID
Each of these groups must be assigned to the CyberPilot Enterprise Application in your Entra ID

The basic steps are:

Go to your "Account" menu and click on "Microsoft"'
Click on "+ New mapping" if you want to add another sync
1. If you want to sync the Entra ID group to a branch or group in the CyberPilot App, you will be prompted to choose which group/branch it syncs to.Fill in the Entra ID Object ID and under the "Add to" drop-down, select what that the group should sync to in the CyberPilot App (account, branch, or group)
Click "Save"

You can repeat this for as mangGroups you want synced to the CyberPilot App.

Set a default language for users in a group

When you are mapping a group in your Entra ID to the CyberPilot App, you can set up a default language for that mapping. This setting applies to new users created, not existing users who have already specified a language preference on the platform.

Setting a language for the Entra ID group mapping in this way will not overwrite existing users' language preferences. Instead, it will assign the selected language to every new user joining the CyberPilot App from this group.

If a user chooses to change their language, their preference will be stored and never updated automatically.

If you don't define a default language for a group or branch, it will inherit the default language from the account. A sub-branch will inherit the default language from it's parent branch.

Here's an example of what it could look like if you are setting different default languages for mappings of Entra ID groups to, e.g., a branch and a group.