Your people sign in through your company's Microsoft 365 or Google Workspace
On Scale, connect the directory your company already runs: people ask to join by signing in, and somebody it switches off is out within a working day.
A company of twenty or sixty people already runs everybody’s sign-in somewhere — Microsoft 365 or Google Workspace. That is where a new hire gets an address, where the passwords and two-step rules are set, and where a leaver is switched off on their last day. Now SMG Tools can sit under it, on Scale.
Prove your domain, connect your company. Add your company’s domain on the Team page, put the record it shows in your DNS, and connect your Microsoft 365 or Google Workspace by signing in with your work account.
People ask to join by signing in. Somebody from your company who signs in with their work account is offered to ask to join your business, rather than start one of their own. You hear about it in For you and by email, and approve them with a role — or decline.
Require it, and keep your own way in. Turn on Require company sign-in, and everyone on the domain but you signs in only through the company, with its passwords and its two-step. You keep a passkey or an authenticator app of your own, for the day the company’s sign-in is down. People off the domain — a subcontractor with their own address — sign in as they always have.
A leaver is out within a working day. A session through your company asks the company again every twelve hours: it answers silently for somebody who still works there, and turns away somebody it has switched off. Nobody has to remember to remove them.
And for every business, on every plan: Microsoft and Google sign-in now trust only an address Microsoft or Google vouches for. Signing in with Microsoft used to trust whatever email address an organization’s directory reported — and any Microsoft 365 administrator can set that to anything. Now a Microsoft or Google sign-in reaches an SMG Tools account by its address only when Microsoft or Google confirms the address belongs to it. If yours does not, you sign in the way you usually do and connect Microsoft or Google from your Security page.