Overview
As a Cloud Solution Provider (CSP), you manage Turbo360 on behalf of your customers. Turbo360 supports three authentication approaches for CSP environments, each designed for a different organisational setup.
Business value
Choosing the right authentication approach for your CSP organisation lets you enforce your security policies, reduce ongoing user management effort, and give your customers a consistent sign-in experience — all without compromising your main tenant's security posture.
How it works
All three approaches authenticate both your internal users and your customers' users against Turbo360 accounts. They differ in where credentials are managed and how federation between tenants is handled.
| Approach | How users authenticate | Best suited for |
|---|---|---|
| Entra SSO with your tenant | Your Entra ID tenant is the identity provider. Your users authenticate directly; customer users are added as guests and federated back to their home tenant. | Organisations where guest users are permitted in the main tenant. |
| Entra SSO with a proxy tenant | A dedicated proxy Entra ID tenant handles authentication for all users — both internal and customer. All users are guests in the proxy tenant and federate back to their home tenants. | Organisations where guest users are not permitted in the main tenant. |
| Username and password | Users authenticate directly with Turbo360 using credentials managed within Turbo360. No Entra ID configuration is required. | Evaluation environments or initial onboarding before SSO is configured. |
Entra ID SSO is the recommended approach for production use. It lets you apply your existing MFA policies, conditional access rules, and group-based access management to Turbo360 users without managing a separate credential set.
Authentication approaches
Entra SSO with your tenant
Your own Entra ID tenant acts as the identity provider. Internal users authenticate directly against your tenant. Users from customer or partner tenants are added to your tenant as Entra guest users and federated back to their home tenant for authentication.
Use this approach when your organisation permits guest users in your main Entra ID tenant.
See Entra SSO with your tenant for setup details.
Entra SSO with a proxy tenant
You create a dedicated Entra ID tenant — the proxy tenant — separate from your main tenant. All users who need Turbo360 access, including your internal users and customer users, are added to the proxy tenant as guests. When a user logs in, the proxy tenant federates them to their home tenant for authentication.
Use this approach when your organisation does not permit guest users in your main Entra ID tenant.
See Entra SSO with a proxy tenant for setup details.
Username and password
Users authenticate directly with Turbo360 using credentials managed within Turbo360 itself. No Entra ID configuration is required. This approach does not support MFA or conditional access policies from Entra ID.
Use this approach for evaluation environments or while setting up Entra ID SSO. It is not recommended for production environments with multiple users.
See Username and password for details and limitations.