Configure user sign-in for Office 2013
Applies to: Office 2013, Office 365 ProPlus
Topic Last Modified: 2016-03-09
Summary: Describes how users sign in to Office 2013 and how they can set sign-in IDs.
Audience: IT Professionals
Office 2013 users can sign in by using either of two types of credentials: Microsoft account, or Organization or School. The second type of credential is the user ID that is assigned by the organization or school for the purpose of accessing Office 365. The user supplies these credentials within the user interface (UI) or, in certain cases, the credentials can be picked up from the operating system.
In this article:
Sign-in is a two-step process that involves discovery and authentication. In the discovery step, the user enters the email address that is associated with his or her account. The Sign in user interface is shown in the following screen shot.
Figure: User interface for signing into Office
The next step is authentication.
When users enter an email address that is associated with a Microsoft account, they are taken to a Microsoft account version of the sign-in UI. The Can’t access your account? link goes to a page that contains password reset instructions.
Figure: User interface for signing into Office with a Microsoft account ID
When users enter an email account that is associated with their organization or school, they are taken to the organization version of the sign-in UI.
Figure: User interface for signing into Office with an Organization ID
You can enable one of four sign-in states by using the Block sign-in to Office Registry setting. This setting controls whether users can provide credentials to Office 2013, and whether they can use their Microsoft account or the user ID that is assigned by your organizations, or both.
The Registry key for this setting is:
To enable a sign-in option, set SignInOptions to a particular numeric value as shown in the following table. The type for the SignInOptions setting is DWORD. The table also describes how each selection affects users.
|If you set SignInOptions to this…||This is what it means||This is the effect on users|
Microsoft account or organization ID
Users can sign in and access Office content by using their Microsoft account or one that is assigned by your organization.
Microsoft account only
Users can sign in only by using their Microsoft account.
Users can sign in only by using the user ID that is assigned by your organization. This can be either a user ID in Azure Active Directory or a user ID in Active Directory Domain Services (AD DS) on Windows Server.
AD DS only
Users can sign in only by using a user ID in Active Directory Domain Services (AD DS) on Windows Server.
Users can't sign in with any ID.
If you disable, or do not configure, the Block sign-in to Office setting, the default setting is 0, which means that users can sign in by using their Microsoft account or one that is assigned by your organization.
When a user signs in to Office 2013, Office automatically tries to use the Active Directory Domain Services (AD DS) account with which the user logged into the operating system. If that Active Directory account is federated with Office 365, the customer automatically receives all the benefits of signing into Office 365 without having to perform any additional steps. For more information about federating your domain with Office 365, see Prepare for single sign-on.