As an administrator, you may not want everyone in your organization to sign into Challo. Microsoft Azure AD provides different ways to provide access to applications, based on your preferences as an organization, or the license you have with Microsoft.
As an administrator you have to configure two Azure AD Enterprise Application for Challo to operate correctly:
The two applications are as follows:
- CafeX—Members of your organization use this to sign into Challo
- Challo—Provides access to resources and content when using Challo
To establish the most appropriate means of configuring the Challo applications, see: Microsoft - Application Management.
As a guide, if you are using Microsoft Office 365, to control who uses Challo you do the following:
- In Microsoft Azure Portal, Configure the Challo application to require assignment, as follows:
- Locate both enterprise applications.
- Set User assignment required? to Yes.
See: Microsoft - Configure an application requires user assignment
- Depending on your Microsoft licensing you do one of the following:
- Assign individuals to both Challo enterprise applications.
See: Microsoft - Assign groups to an application - Create a new Group for Challo and assign it for both Challo enterprise applications.
Add and remove members as you require.
See: - Create a new Group for Challo and configure Self-Service for both Challo enterprise applications.
If you do not enable Require approval before granting access to this application, people are automatically added to the Challo group, when they sign in to Challo.
You may want to configure the Azure Access Panel to allow users to send approvals to the administrator.
See:
- Assign individuals to both Challo enterprise applications.
Access denied
If you sign into Challo and see the following Access has been denied message, it means that you are not assigned to use Challo in your organization.
An administrator has to assign you to Challo so that you are able to sign in and use it. You can still join meetings in Challo as a guest if you do no sign in and the meeting moderator allows you to join.