---
title: "Set the login to CUE Admin with an external identity"
canonical: "https://docs.cuesystem.com/space/TAM/844693546/Set%20the%20login%20to%20CUE%20Admin%20with%20an%20external%20identity"
format: markdown
---
Follow these instructions to log in to **CUE Admin** with a Microsoft 365 / Google account.

## Prerequisites

- Installed [CUE Solution](https://docs.cuesystem.com/space/Dep/151781380)
- Completed [creating reservation suite](https://docs.cuesystem.com/space/TAM/16810034) - a user can log in to CUE Admin
- Set the redirect URI for CUE Admin
  - [Registered app creating - Microsoft 365 Setup Guide](/wiki/spaces/M3SG/pages/255950885/Registered+app+creating#Redirect-URIs)
  - For example see <span style="color: #0747a6">[https://admin.contoso.com/account/oauth-callback](https://admin.contoso.com/account/oauth-callback)</span>

## Procedure

### Set or modify a connection agent for Apps  


- In the **Connection agent** section, create or modify existing **connection agent for Apps** Microsoft 365 / Google depending on which external identity you want to use.
  - If you want to use both a Microsoft 365 and Google account, you must create two connection agents.
  - If you have already created a **connection agent for Apps** for required  calendar server, edit your current connection agent.
  - Follow these instructions to create a connection agent:  
[Connection agent for apps (formerly for touchONE-assist) - touchONE-admin Administration Manual - touchONE Manuals](https://docs.cuesystem.com/space/TAM/242581510)
- In connection agent for  Apps settings tick the following checkmark   
**Allow to log in to CUE Admin with an external identity**

![image](media://c1b73efc-ff7f-4377-a989-9521e3553c7a)

- Fill in the text for the **Login **button
  - It is a button on the login page of **CUE Admin** which is used for login with an external identity.


### Set an admin account for the external identity


- Create a new user in the section **User management - CUE Admin users**.
  - If you have already created a user that you want to allow to log in with an external identity, you just have to edit it.
- Fill in the required data and check the **Enable External login**.
- Click the **ADD EXTERNAL ACCOUNT** button and enter an external account email/ user principal name. This email must exist in the tenant’s AAD / AD / Entra.
- After you have completed everything, save the user.


**Now you can log in to CUE Admin with an external identity! **  


> ℹ️ If you need to disable the basic authentication for CUE Solution installed as On-Premises, follow these steps [https://cue.atlassian.net/wiki/spaces/Dep/pages/617447446](https://cue.atlassian.net/wiki/spaces/Dep/pages/617447446) . 
> ℹ️ 
> ℹ️ If you are using CUE Solution as SaaS, please request to disable basic authentication via [support.cuesystem.com](https://support.cuesystem.com/).

> ⚠️ Even if you disable the basic authentication, **we recommend you have at least one admin account set up so that it can be used to log in with the basic authentication** when the basic authentication will be enabled again. That is, the account will have a local email and password set up for the Basic Authentication login.  
> ⚠️ **This can be for example useful in case the Microsoft 365 / Google authorization server is unavailable, or the Client Secret in the Connection Agent used for login expires.**
> ⚠️ 
> ⚠️ In this case, enable the Basic Authentication and you will be able to log in to CUE Admin in emergency mode.