Introduction

This article explains the authentication methods available for Spindle Approvals.

It covers important considerations when using email/password credentials versus Microsoft sign-in particularly relating to Two-Factor Authentication (2FA) and Multi-Factor Authentication (MFA).

Email/Password Authentication (Draycir Credentials)

Spindle Approvals supports login using the email and password created when the initial process of Signing up to approvals.

Problem

2FA/MFA is not supported when using Draycir-provided email/password authentication.

Solution 

Users who require 2FA/MFA should instead use the “Sign in with Microsoft” option

Using “Sign in with Microsoft”

If 2FA or MFA is required, users can authenticate using their Microsoft account via the “Sign in with Microsoft” button.

Applies to

This method is suitable only for organisations that do not require enforced multi-factor authentication on user accounts.

Notes

• 2FA/MFA setup and enforcement must be managed by the organisation’s IT department, not by Draycir.
• Microsoft sign-in follows the organisation's existing Microsoft 365 security policies, meaning any MFA requirements already in place will apply automatically.

Switching from Draycir Login to Microsoft Sign-in

Users may choose to switch from using their Draycir-provided email/password to Microsoft sign-in.

Critical Consideration:

• Switching back to Draycir login after moving to Microsoft sign-in is not straightforward through the portal.
• Before a user account is switched, ensure please be aware that reverting back is not easily reversible.