How Microsoft sign-in works
When you choose Continue with Microsoft, Microsoft checks who you are — using your Microsoft password, passkey or authenticator, and your organization’s rules — and then tells us, in a signed message only we can use, which Microsoft account signed in.
What happens, step by step
- We send you to Microsoft’s own sign-in page (
login.microsoftonline.com). You never type your Microsoft password on a Rogue Productions page. - Microsoft applies your organization’s rules — multi-factor authentication, device and location checks — or, for a personal account, your own security settings.
- Microsoft sends you back with a one-time code, which our server exchanges directly with Microsoft for a signed statement of who you are.
- Our server checks that statement’s signature against Microsoft’s published keys, and that it was issued to us, for this exact sign-in, moments ago. Anything else is refused.
- We ask for your Rogue Productions two-step code, and you’re in.
What we receive — and what we don’t
| We receive | We never receive or access |
|---|---|
| Your name | Your Microsoft password |
| Your email address (as a hint — we confirm it separately when Microsoft can’t vouch for it) | Your email, OneDrive files, calendar, Teams chats or contacts |
| A Microsoft account identifier (so we recognise you next time) | Anything in your organization’s directory |
| Whether your organization assigned you a Rogue Productions role | Your other apps or devices |
We ask Microsoft only for the standard sign-in permissions (openid, profile, email). That’s why most organizations and all personal accounts can approve it without an administrator.
How we recognise you
We recognise you by Microsoft’s permanent identifier for your account in your organization — never by your email address, which can change or be reused. That’s also why simply having the same email as an existing Rogue Productions account never connects the two on its own: you’ll be asked to prove the existing account first. More on connecting accounts
Signing out
- Signing out of Rogue Productions never signs you out of Microsoft 365.
- If you sign out of your Microsoft account in your browser, Microsoft tells us and your Rogue Productions sessions from that sign-in end too.
While you’re signed in
About once an hour (more often if your organization chooses), we quietly check with Microsoft that your account is still allowed in. Usually you won’t notice. If your organization has disabled your account, removed your access or wants you to sign in again, that check is how Rogue Productions finds out. Details
Still stuck? Contact Rogue Productions support — include the “Reference” shown on any sign-in error page. This guide describes how sign-in works today; it is updated with every change to it.