Microsoft Monetize - Microsoft identity platform login
This document outlines an overview of authenticating users for Microsoft Advertising Advertising Products using Microsoft Identity Platform.
With the consolidation of Microsoft Advertising to the Microsoft family, we have integrated the authentication process of the users (who are using Microsoft Advertising products) to the Microsoft Identity Platform. The profound advantage of this integration is that users are able to access Microsoft Advertising applications using the same sign-on methods to access other Microsoft products. Additionally, the integration to the Microsoft Identity Platform enables new and more secure methods of authentication, powered by Microsoft.
Benefits
Improved Security: The Microsoft Identity Platform brings modern security practices to the Microsoft Advertising platform.
Single Sign On: Organizations that integrate with the Microsoft Identity Platform to enable Single Sign On (SSO) with other Microsoft products will be benefited by this approach as the capabilities such as a corporate control of credentials, access rules, etc. will be applicable to Microsoft Advertising product logins also.
Account Switcher: Users with access to multiple accounts on the Microsoft Advertising Platform will be able to switch between different accounts seamlessly without being required to sign out and sign back in.
Supported and unsupported products
Currently, the following Microsoft Advertising products support authentication using the Microsoft Identity Platform:
- Monetize SSP
- Invest DSP
- Curate
The following Microsoft Advertising products are not supported on the Microsoft Identity Platform currently, but soon will be migrated:
- Digital Platform API
- Impression Bus API
- Yield Analytics
- Bidder Platform
- Microsoft Advertising Customer Support Portal
The following features are not yet supported by Microsoft Advertising:
- Automatic Provisioning of Users
- Account Linking between multiple email addresses
Authentication options
Microsoft Advertising's integration with the Microsoft Identity Platform allows users to authenticate with two options:
- Azure Active Directory supported SSO (Preferred Method)
- Personal Microsoft Accounts
Azure Active Directory supported SSO (Preferred Method)
Microsoft Identity Platform enables organizations to authenticate their users to various cloud and on-premise solutions using the same set of credentials. If you are yet to be integrated with Microsoft Identity Platform, you can learn more about Azure Active Directory and Single Sign On here.
Personal Microsoft accounts
If you do not have an organization level integration with Azure Active Directory or the Microsoft Identity Platform, you can still use the Microsoft Identity Platform by registering your email address as a Microsoft Account, or creating a new account with Microsoft. For more details about this process, click here.
Prerequisites for signing in with the Microsoft Identity Platform
- Have a Microsoft Identity Platform account
- If you have corporate managed account which is used to login to other Microsoft products, this should already be configured.
- If your corporate domain is not managed, you can register your email as a Microsoft Account here or from the sign-in page.
- Ensure that the email associated to your Microsoft Advertising platform account matches the user principal name or email used to login to Microsoft. Contact the designated person from your organization with the role of User Manager to complete the following steps.
- go to the User Management functionality in a Microsoft Advertising product
- update the email IDs of users to match the user principal names or email IDs of the Microsoft Account or Azure Active Directory integration