[Access Control] Implementation Procedure Summary (Microsoft 365)

Overview

This article introduces the series of procedures, from pre-implementation checks to starting Access Control operations, for customers using Microsoft 365 as their groupware when implementing Access Control.

What You Need

1. A HENNGE One Customer Portal account
   Confirm the Login URL for the Access Control Administration and the information for the initial Admin account.
   For instructions on how to confirm this information, see [Customer Portal] Checking the List of HENNGE One Services.
2. An account with Microsoft 365 Global Admin privileges
3. An account with Access Control Global Admin privileges
4. （Only when performing Synchronization with Active Directory）An account with Active Directory Admin privileges

Notes

1. Confirm the required items according to the services and purposes of use.
2. The content of this article is based on product information as of October 2026 and may be changed without prior notice.
3. Before implementation, be sure to review HENNGE One System Requirements.
   This provides information on restrictions for each product and feature.

Table of Contents

Procedure

1. Microsoft 365 Prerequisites

First, make the required configuration changes to begin using Access Control with your Microsoft 365 environment.
Prepare a Microsoft 365 Global Admin account and complete all four of the following settings.

1. Change the default domain for Microsoft 365 
   To enable Microsoft 365 authentication through Access Control （enable federation）, change the default Microsoft 365 domain to "onmicrosoft.com".
2. Regarding the "Always Connect to Outlook" Feature in Outlook on the Web 
   If this feature is enabled, access from unauthorized environments may remain possible even after federation, so disable it.
3. [Access Control] How to Check the Status of Modern Authentication Enablement for Exchange Online 
   This procedure checks the modern authentication enablement status required for access control to function properly.
4. [Access Control] Change the UPN of non-user objects to the onmicrosoft.com domain 
   This procedure prevents non-user objects in the Microsoft 365 Tenant, such as meeting rooms, equipment, and shared mailboxes, from being managed by Access Control.

2. Access Control Policy Settings

Configure access policies （access permission conditions） for logging in to single sign-on services from Access Control. Also configure the Password policy for the entire Tenant.
※Complete this procedure using an account with Access Control Global Admin privileges.

1. Review access policies
   Select the requirements you want to configure from the access control patterns in the table below.
   If you want to configure an access control method other than the patterns below, Search for separate procedures in the Help Center or contact your implementation representative.

2. [Access Control] Define Access policy groups and Access policy templates 
   Configure the selected policies.
3. Password-related settings (Modern View) 
   Configure the Password policy.

3. User Registration and Synchronization

The procedure differs depending on whether Users are synchronized from Active Directory or created in Access Control. Review the applicable procedure before proceeding.

4. Admin and End User Procedures Based on Access Policies

Based on your access control requirements, please review the implementation procedures for the applicable features.

With the procedures up to this point, all configuration required before beginning Access Control operations is complete.
In the next procedure, you will test the operation of the Access policy configured before beginning operations.

5. Assigning Access Policies and Testing Operation

1. Assign Access Policy Group to Users (Modern View) 
   Assign Access policies to the Users created in Access Control.
2. Perform Access Policy Group Operation Test (Modern View) 
   After completing the Access policy assignment, log in to the Access Control User screen as the Target User and test whether access control functions as expected.

After the operation test is complete, configure single sign-on（Federate）with Microsoft 365 in the next procedure and begin operations.

6. Configuring Single Sign-On

1. [Access Control] Federation Connection Process with Microsoft 365 
   Establish a single sign-on（Federate）Connection between Microsoft 365 and Access Control, then begin production operations.
2. Confirmation of Federation Status between HENNGE Access Control and Microsoft 365 
   After completing the Connection Configuration, confirm that Federation has been configured successfully between Microsoft 365 and Access Control.
3. Microsoft Entra ID Modern Authentication Disconnection 
   Even after Federation is performed, existing authentication information（Sessions logged in before Federation was performed）is retained. Therefore, disconnect all authentication Sessions once and require Users to log in through Access Control.

If you want to use single sign-on with services other than Microsoft 365

The single sign-on configuration procedure varies depending on the service.
Manuals for services verified by HENNGE are available in the Help Center. Please follow the relevant manual to complete the procedure.

• Single Sign-On Manuals

Translation Disclaimer

This article has been automatically translated from the original Japanese version for your convenience.
While we strive to ensure accuracy, we cannot guarantee its reliability or completeness.

In the event of any discrepancies or questions regarding the content, the official Japanese version shall prevail.