Authentication
UserLens Insights uses Microsoft Entra External ID for secure user authentication. This guide explains how authentication works, how to sign in and out, and answers common questions.
Overview
UserLens Insights authenticates users through Microsoft's identity platform, providing enterprise-grade security while maintaining a simple sign-in experience. When you sign in, Microsoft handles the credential verification—your password is never stored or processed by UserLens directly.
Signing In
- Click the Sign In button on the application header or welcome screen.
- A popup window opens to Microsoft's secure sign-in page.
- Enter your email address and password.
- If your organization uses multi-factor authentication (MFA), complete the additional verification step.
- After successful authentication, the popup closes and you're signed in to UserLens.
Note: Ensure your browser allows popups from UserLens. If the sign-in window doesn't appear, check your browser's popup blocker settings.
Signing Out
- Click your profile icon or name in the application header.
- Select Sign Out from the menu.
- A confirmation popup appears and you're signed out of UserLens.
Signing out ends your UserLens session. If you also want to sign out of your Microsoft account entirely (for shared computers), you can do so at account.microsoft.com.
Your Profile Information
When you sign in, UserLens receives the following information from your identity provider:
| Information | Description |
|---|---|
| User ID | A unique identifier for your account |
| Your email address | |
| Display Name | Your name as configured in your account |
| Organization ID | Your organization's identifier (if applicable) |
| Role | Your permission level within UserLens |
This information personalizes your experience and determines what features and data you can access.
Session Management
UserLens manages your authentication session automatically. Here's what to know:
Session Duration: Your session remains active as long as you're using the application. After a period of inactivity, you may need to sign in again.
Automatic Token Refresh: UserLens automatically refreshes your authentication in the background. You shouldn't need to re-enter credentials during a typical work session.
Multiple Tabs: Your session is shared across browser tabs. Signing out in one tab signs you out everywhere.
Security Features
UserLens authentication includes several security measures:
Secure Token Storage: Authentication tokens are stored in your browser's local storage and are automatically cleared when you sign out.
No Password Storage: Your credentials are verified by Microsoft—UserLens never sees or stores your password.
Encrypted Communication: All authentication data is transmitted over HTTPS.
Multi-Tenant Isolation: If your organization uses UserLens, your data is isolated from other organizations through tenant-based partitioning.
Troubleshooting
The sign-in popup doesn't appear
Your browser may be blocking popups. To resolve this:
- Look for a popup blocked notification in your browser's address bar.
- Click it and select "Always allow popups from this site."
- Try signing in again.
Sign-in fails with an error
Common causes and solutions:
| Error | Solution |
|---|---|
| "User account does not exist" | Verify you're using the correct email address, or contact your administrator to provision your account. |
| "Popup was blocked" | Enable popups for UserLens in your browser settings. |
| "Network error" | Check your internet connection and try again. |
| "Session expired" | Close and reopen the application, then sign in again. |
I'm signed out unexpectedly
This can happen if:
- Your session token expired after extended inactivity.
- Your browser cleared its storage (private/incognito mode, or automatic cleanup settings).
- Your administrator revoked access.
Simply sign in again to continue working.
I can't access certain features
Your role determines which features you can access. If you believe you should have access to a feature, contact your UserLens administrator to verify your permissions.
Privacy
UserLens only collects the minimum information necessary to provide the service:
- Your email and name are used to identify you within the application.
- Your organization ID ensures your data is kept separate from other organizations.
- Authentication activity may be logged for security purposes.
For complete privacy information, refer to your organization's data handling policies and Microsoft's privacy statement.
Getting Help
If you continue to experience authentication issues:
- Check the status page for any known service disruptions.
- Contact your administrator for organization-specific issues.
- Clear browser cache and try again in a new browser window.
- Try a different browser to rule out browser-specific issues.