Leadership Echo Sign-in test

Can you sign in?

That is the whole test. About thirty seconds, and there is nothing to fill in.

Before building the real thing, we need to know one practical thing: can you sign in with your normal work account, on your normal work computer or phone?

Press the button and sign in the way you usually would, then tell us what happened. If it refuses, that is a useful answer too — the next page explains what the refusal means.

What this page does and does not do

It stores nothing. Not your name, not your email address, not a record that you opened it. The next page shows you what your organisation sent, and then it is gone.
It asks for sign-in only. No access to mail, files, calendar or contacts. The permissions requested are the three that let a website confirm who you are: openid, profile, email.

For IT and security

OpenID Connect authorization-code flow with PKCE against login.microsoftonline.com/organizations, using a multi-tenant app registration owned by Cegos. The ID token is verified against Microsoft’s published signing keys, with the issuer checked against the token’s own tid. No directory data is read, no Microsoft Graph permission is requested, and nothing is persisted — there is no database attached to this service.