Configure user sign-in for Office 2013
Applies to: Office 2013, Office 365 ProPlus
Summary: Describes how users sign in to Office 2013 and how they can set sign-in IDs.
Audience: IT Professionals
Office 2013 users can sign in by using either of two types of credentials: Microsoft account, or Organization or School. The second type of credential is the user ID that is assigned by the organization or school for the purpose of accessing Office 365. The user supplies these credentials within the user interface (UI) or, in certain cases, the credentials can be picked up from the operating system.
In this article:
The sign-in UI
Sign-in settings
Single sign-on, Active Directory, and federated sign-in
The sign-in UI
Sign-in is a two-step process that involves discovery and authentication. In the discovery step, the user enters the email address that is associated with his or her account. The Sign in user interface is shown in the following screen shot.
Figure: User interface for signing into Office
.png "A screenshot of a sign-in window that lets you decide whether to use a Microsoft account or Organization ID to sign-in.")
The next step is authentication.
When users enter an email address that is associated with a Microsoft account, they are taken to a Microsoft account version of the sign-in UI. The Can’t access your account? link goes to a page that contains password reset instructions.
Figure: User interface for signing into Office with a Microsoft account ID
.png "A screenshot of a sign-in window that lets you sign in to Office 2013 with a Microsoft account ID.")
When users enter an email account that is associated with their organization or school, they are taken to the organization version of the sign-in UI.
Figure: User interface for signing into Office with an Organization ID
.jpg "A screenshot of the Office sign-in page that lets user sign in with Personal ID.")
Sign-in settings
You can enable one of four sign-in states by using the Block sign-in to Office Registry setting. This setting controls whether users can provide credentials to Office 2013, and whether they can use their Microsoft account or the user ID that is assigned by your organizations, or both.
The Registry key for this setting is: HKEY_CURRENT_USER\Software\Microsoft\Office\15.0\Common\SignIn\SignInOptions
To enable a sign-in option, set SignInOptions to a particular numeric value as shown in the following table. The type for the SignInOptions setting is DWORD. The table also describes how each selection affects users.
SignInOptions settings
| If you set SignInOptions to this… | This is what it means | This is the effect on users |
|---|---|---|
0 |
Microsoft account or organization ID |
Users can sign in and access Office content by using their Microsoft account or one that is assigned by your organization. |
1 |
Microsoft account only |
Users can sign in only by using their Microsoft account. |
2 |
Organization only |
Users can sign in only by using the user ID that is assigned by your organization. This can be either a user ID in Azure Active Directory or a user ID in Active Directory Domain Services (AD DS) on Windows Server. |
3 |
AD DS only |
Users can sign in only by using a user ID in Active Directory Domain Services (AD DS) on Windows Server. |
4 |
None allowed |
Users can't sign in with any ID. |
If you disable, or do not configure, the Block sign-in to Office setting, the default setting is 0, which means that users can sign in by using their Microsoft account or one that is assigned by your organization.
Single sign-on, Active Directory, and federated sign-in
When a user signs in to Office 2013, Office automatically tries to use the Active Directory Domain Services (AD DS) account with which the user logged into the operating system. If that Active Directory account is federated with Office 365, the customer automatically receives all the benefits of signing into Office 365 without having to perform any additional steps. For more information about federating your domain with Office 365, see Prepare for single sign-on.