SSO & users

Nobody wants to set up 40 passwords. Mango Inventory brings your staff in on two paths: by invitation, or automatically via directory sync — either way, they sign in with the Microsoft or Google account they already have.

Users and invitations

Under Settings → Users you invite people by email and pick the role:

• Owner — manages everything, including users and settings.
• Manager — manages the whole inventory.
• Member — scans, reports tickets and creates orders.
• Viewer — can see everything, change nothing.

The invite link can also be copied directly and shared via chat, for example. Larger lists: import people via CSV.

Roles and responsibilities

Roles determine what someone may do. Responsibilities determine who takes care of tickets and orders: who is responsible for tickets or responsible for orders is set individually by owners under Settings → Ticket settings and Order settings — the Manager role alone makes nobody responsible. That keeps role assignment simple: the operations lead can be a Member and still be responsible for all defect tickets, say.

Removing users

When someone leaves the organization, owners remove the user via the menu next to their role. Beforehand, Mango Inventory shows what the person still holds: assigned items and stock go back to their home location, open tickets and orders are reassigned to the default responsible people — nothing is left unassigned. If the person is themselves the organization’s default responsible person, the dialog first requires a successor — a person or a team. The person profile is archived — not deleted — so the history (who had what, who reported what) stays fully intact.

Signing in with Microsoft or Google

The sign-in page offers “Continue with Microsoft” and “Continue with Google” — without a new password. Signing in alone grants no access to your organization: only people who were invited or join via directory sync become users.

For your IT: approving Microsoft sign-in for everyone

On the first Microsoft sign-in, Microsoft asks each person once for consent (“Mango Inventory wants to read your name and email address”). Some organizations restrict this user consent — then sign-in fails with a note that an administrator must consent. Your Microsoft administration can grant consent for the whole organization with one click, so nobody gets asked anymore:

https://login.microsoftonline.com/organizations/adminconsent?client_id=f0e8a412-8532-4ac9-b8e9-417df164de8b&redirect_uri=https%3A%2F%2Fapp.mangoinventory.com%2F

Open the link in a browser, sign in with a Microsoft administrator account and confirm the permissions shown (basic profile only: name and email address — no access to files, mail or calendar). If your organization allows user consent (Microsoft’s default), this step isn’t needed.

Your account: email confirmation and password

On sign-up, Mango Inventory sends a confirmation email. Nothing is blocked — you keep working right away; until you confirm, a subtle reminder in the app points to it, with “Resend email” right inside. The confirmed address is also the prerequisite for joining automatically via directory sync; anyone joining via an invite link to the invited address counts as confirmed automatically.

Under Settings → Account you manage your own sign-in: your email address with its confirmation status (including a resend of the link) and Change password — you receive a link by email to set a new password. An account with a confirmed email address can also sign in directly with “Continue with Microsoft” or “Continue with Google”, as long as the address matches — no separate linking needed.

Directory sync

For organizations with Microsoft Entra or Google Workspace: connect the directory under Settings → Single sign-on, pick the groups to sync — Mango Inventory reconciles every night (or on demand with “Sync now”).

• New group members join automatically — no invitation email needed.
• Name changes and profile pictures are taken over.
• Whoever leaves the group is deactivated — never deleted; returning to the group reactivates their access.

That way the whole lifecycle runs automatically — joining, name changes, leaving — without anyone maintaining user lists; invitations stay available alongside it, for externals. What the sync does exactly is under Directory sync; the click-by-click guides are under Connect Microsoft Entra and Connect Google Workspace.