--- title: Microsoft Entra ID in Profile: FAQ slug: portal-sub/microsoft-entra-id-in-profile-faq docTags: createdAt: 2026-03-04T12:03:15.551Z --- # FAQ: Quick Links - [After Setting up a Microsoft Entra ID account, will my local Profile account credentials remain functional so I will be able to sign in with it?](docId\:BcQmJgnOCa-MMuINnxwJQ) - [As an Administrator, can I enforce all users in my organization to ONLY use Microsoft Entra ID to log into Profile? ](docId\:BcQmJgnOCa-MMuINnxwJQ) - [Is it possible for two Profile local accounts to share the same Microsoft Entra ID account? ](docId\:BcQmJgnOCa-MMuINnxwJQ) - [What are the best practices for sharing a workstation with a colleague while using Microsoft Entra ID with Profile? ](docId\:BcQmJgnOCa-MMuINnxwJQ) - [What happens when a local Profile user account is locked out (due to many failed login attempts), but they try to sign in via Microsoft Entra ID SSO?](docId\:BcQmJgnOCa-MMuINnxwJQ) - [What audit records does Profile maintain for login activity through Microsoft Entra ID? ](docId\:BcQmJgnOCa-MMuINnxwJQ) - [What MFA (multi-factor authentication) options are available with Microsoft Entra ID? ](docId\:BcQmJgnOCa-MMuINnxwJQ) - [Can we still use the Profile session 'lock' function to temporarily restrict access on an active Profile session? ](docId\:BcQmJgnOCa-MMuINnxwJQ) - [What happens when I reach the specified period of inactivity, and my Profile session gets locked? ](docId\:BcQmJgnOCa-MMuINnxwJQ) - [How can we access Profile if Microsoft Entra ID is unavailable?](docId\:BcQmJgnOCa-MMuINnxwJQ) ## After setting up a Microsoft Entra ID account, will my local Profile account credentials remain functional so I will be able to sign in with it? Yes, your local Profile account credentials will still work as long as you know the correct username and password.  *** ## As an Administrator, can I enforce all users in my organization to ONLY use Microsoft Entra ID to log into Profile?  Yes, you can enforce this. First, ensure that all users are fully configured for Microsoft Entra ID. Second, reset their local passwords in Profile and withhold the new passwords from them. Third, make sure to uncheck \[Show “I forgot my password” link] in Profile Preferences > Security tab to prevent the user from resetting their local password. As a result, this will prevent users from signing in with local accounts, effectively requiring them to log in with Microsoft Entra ID.    *** ## Is it possible for two Profile local accounts to share the same Microsoft Entra ID account?  No, it is not possible to assign the same Microsoft Entra ID account to two different Profile accounts. The Profile system will not allow this. Each Profile account must be linked to a unique Microsoft Entra ID account to ensure proper authentication and account management.  *** ## What are the best practices for sharing a workstation with a colleague while using Microsoft Entra ID with Profile?  Each Profile user should have their own individual Windows session on the shared workstation. This ensures that their Microsoft Entra ID credentials, Profile settings, and associated data remain secure and isolated. *** ## What happens when a local Profile user account is locked out (due to many failed login attempts), but they try to sign in via Microsoft Entra ID SSO? Profile will block the login attempt and display an error message, even if the Microsoft Entra ID account is active and correctly configured. *** ## What audit records does Profile maintain for login activity through Microsoft Entra ID?  The following events are documented in Profile audit table:  - Failed login for SSO Microsoft Entra ID enabled but Microsoft Entra ID User Account not configured properly in Profile.  - Successful login for SSO Microsoft Entra ID enabled and Microsoft Entra ID User Account configured properly.  Any failed login attempts at the Microsoft Entra ID layer will be handled by Microsoft Entra ID’s audit system (for example: User entered an incorrect password for Microsoft Entra ID authentication). *** ## What MFA (multi-factor authentication) options are available with Microsoft Entra ID?  Microsoft Entra ID offers a range of MFA options, including the Microsoft Authenticator app, SMS and voice calling. MFA features like passwordless authentication and conditional access may be included in your subscription. We encourage you to verify what’s available with your current license. *** ## Can we still use the Profile session 'lock' function to temporarily restrict access on an active Profile session?  We recommend locking your Windows session instead of using the Profile 'lock' function. Locking the Windows session ensures that access to the entire system is secured, preventing unauthorized users from accessing Profile.  *** ## What happens when I reach the specified period of inactivity, and my Profile session gets locked?  Resuming your Profile session will not require you to reauthenticate with Profile. If you wish to securely lock a session after a specified period of inactivity, we recommend enforcing this through locking the Windows session instead.  *** ## How can we access Profile if Microsoft Entra ID is unavailable? Profile local accounts will remain functional. Assuming Users know their local Profile password, to access Profile without Microsoft Entra ID, they can follow these steps:  1. Users access the Profile shortcut without the SSO parameter, which will direct them to the traditional login screen. 2. Users enter their Profile local account credentials at the traditional login screen. *** # Learn More Click on the following links to read more about MS Entra ID in Profile. - [Microsoft Entra ID in Profile](docId:7vBBYDxhIcV4CIg1vbcWD) - [How to Configure the Profile Application in Microsoft Entra ID Tenant](docId\:ahJpd7hIPDMpNmyKgkhD7) - [How to Add Single Sign-On MS Entra ID License in Profile](docId\:wiKAAADVi80fASeTQMUKv) - [How to Configure Single Sign-On (SSO) for Microsoft Entra ID in Profile](docId:1zwBi7NJEDkcJkBfMnPyZ) - [How to Configure Existing Users for Single Sign-On (SSO) with Microsoft Entra ID in Profile](docId\:Dx0Y5TYBX-QkQ2ROhI0z-) - [How to Add new Users to Profile for Single Sign-On (SSO) with Microsoft Entra ID in Profile](docId\:InFKWTP01GtHumhdrkB2n) - [How to Prevent Users from Using Microsoft Entra ID Single Sign-On (SSO) as a Login Method](docId\:Z9BjONEx05g1ui4JOlQBK) - [How to Enforce Users to Only Use Single Sign-On (SSO) Microsoft Entra ID as a Login Method](docId\:DVJ52aQrMnTx_m09uCStU) - [How to Configure a Profile User's Application Shortcut to Use Single Sign-On (SSO) (Microsoft Entra ID) Login Method](docId\:s0_SfCMDuO3B2oQE2f9JF)