> For the complete documentation index, see [llms.txt](https://docs.devolutions.net/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://docs.devolutions.net/cloud/getting-started/get-started-with-sso-in-devolutions-cloud/invite-users-to-devolutions-cloud-with-sso/end-user-invitation-experience-for-sso-in-devolutions-cloud.md).

# End user invitation experience for SSO in Devolutions Cloud

Users that are invited to join Devolutions Cloud receive this email from their administrator.

1. Access the Devolutions Cloud URL link.
2. Log in using the ***Sign in with Microsoft*** button.

   ![](https://cdnweb.devolutions.net/docs/docs_en_hub_Hub4147.png)

New users accessing Devolutions Cloud through Entra ID sign in will go through this configuration if they do not have a Devolutions Account. Since you do not want the user to define a password for this account, you need to have a way to store the ***Private Key***. It is usually kept with the password account. This special and unique key for each user is needed when the user changes device or browser. On a daily basis, the device and browser recognize the current user, but not a new one.

This is why the user needs to store this ***Private Key*** on the ***Devolutions Password Manager mobile app***. It will be much more convenient for the user to do a push notification to accept the new device or browser.

* We strongly recommend the first method with the ***Devolutions Password Manager mobile app***. Follow the steps in Devolutions Password Manager mobile app method.
* The second best option is to download and print the ***Private Key*** as a ***QR Code***. For this method, continue to QR Code method.
* As a last resort and if the user does not have a mobile device, a password can be created to add the ***Private Key*** to the Devolutions Account.

### Devolutions Password Manager mobile app method

1. Download Devolutions Password Manager.
2. Click ***Continue***.
3. In Devolutions Password Manager, access the ***Authenticator*** space, then click ***Add***.
4. Back on the browser page, click on ***Mobile App***.
5. Scan the QR code in the Devolutions Password Manager.
6. Wait for the account and the authenticator to pair. Once this setup is completed, it will provide access to Devolutions Cloud.

You can now skip to First access to Devolutions Cloud.

### QR Code method

1. Select the ***QR Code*** option.
2. Click ***Download*** to save the ***Private Key*** as a QR code document on your computer. You can also ***Print*** a copy.

   ![](https://cdnweb.devolutions.net/docs/docs_en_hub_Hub4155.png)
3. Click ***Continue***.

Here is an example of the content of the PDF file. It will be named *devolutions-qr-code.pdf*. Please make sure to keep it in a safe place.

![](https://cdnweb.devolutions.net/docs/docs_en_hub_Hub4162.png)

You are now ready to continue to the next section.

### First access to Devolutions Cloud

1. Since the user was invited with an invitation ID and key, click ***Yes***.

   ![](https://cdnweb.devolutions.net/docs/docs_en_hub_Hub4153.png)
2. Since Devolutions Cloud was opened from your email, ***Invitation id*** and ***Invitation key*** should be autofilled. If that is not the case, copy the code and paste it in the appropriate fields.
3. Click ***Unlock***.

The user in now connected and is ready to use Devolutions Cloud.


---

# Agent Instructions
This documentation is published with GitBook. GitBook is the documentation platform designed so that both humans and AI agents can read, navigate, and reason over technical content effectively. Learn more at gitbook.com.

## Querying This Documentation
If you need additional information that is not directly available in this page, you can query the documentation dynamically by asking a question.

Perform an HTTP GET request on the current page URL with the `ask` query parameter:

```
GET https://docs.devolutions.net/cloud/getting-started/get-started-with-sso-in-devolutions-cloud/invite-users-to-devolutions-cloud-with-sso/end-user-invitation-experience-for-sso-in-devolutions-cloud.md?ask=<question>
```

The question should be specific, self-contained, and written in natural language.
The response will contain a direct answer to the question and relevant excerpts and sources from the documentation.

Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.