How to Use Microsoft 365 Single Sign-On (SSO) with Helperbird

What is Microsoft 365 SSO with Helperbird?

Helperbird integrates with your school's Microsoft 365 environment so students and staff can access Helperbird without creating a separate account or remembering another password.

When Helperbird is deployed through Microsoft Intune or installed on a managed device, it works alongside the Microsoft 365 account the user is already signed into. There is no extra login step.

Who is This For?

This guide is for:

• IT administrators deploying Helperbird across a school board or district
• Schools using Microsoft 365 and Microsoft Intune for device management
• Organizations that want a simple, secure way to give students access to Helperbird

Two Authentication Methods

Helperbird supports two ways to authenticate users in a Microsoft 365 environment. Both methods mean students never need a separate Helperbird username or password.

Method 1: Subscription Key (Recommended)

This is the simplest and most private method. A single subscription key is added to the extension configuration during deployment. Every user on a managed device gets access automatically.

How It Works

1. Your IT team deploys Helperbird as a managed extension through Microsoft Intune.
2. The subscription key is included in the extension policy configuration.
3. When a student or staff member logs into their managed device with their Microsoft 365 account, the browser opens with Helperbird already installed and activated.
4. No sign-in to Helperbird is needed. The extension is ready to use.

Why We Recommend This Method

• No student data collected - A school key identifies your domain, not the student. Helperbird does not need to know who the user is.
• No extra permissions required - The extension does not need access to the user's email or identity.
• Nothing for the user to do - It just works when they open their browser.
• Best for privacy - No personally identifiable information is shared with Helperbird.

Method 2: School Email Sign-In

If your organization prefers user-level authentication, Helperbird can identify users by the school email address they are signed into their browser with.

How It Works

1. The student or staff member opens Helperbird's settings page and clicks the sign-in button. This method needs Edge, where the button reads Continue with Microsoft Account and Helperbird reads the Microsoft 365 account the browser profile is signed in with. On Chrome the button reads Continue with Google Account and reads the Google account the profile is signed in with instead.
2. Helperbird asks the browser for permission to see the email address the user is signed in with.
3. The user approves the permission. Helperbird reads their school email address from the browser session.
4. Helperbird activates their license based on their email.

What This Looks Like for the User

• No separate password is needed. Helperbird uses the email from the Microsoft 365 account they are already signed into.
• A one-time permission prompt appears asking the user to allow Helperbird to see their email. After approving, it does not appear again.

When to Use This Method

• When you need to track usage per individual user
• When your licensing model requires user-level identification
• When your organization prefers explicit user authentication

Which Method Should I Use?

For most school boards, we recommend the subscription key method. It is simpler to deploy, requires no action from students, and collects no personally identifiable information.

Need Additional Help?

If you have any questions or run into any issues, please contact the Helperbird support team. You can reach us at Helperbird support. We are happy to help you get the most out of Helperbird.