# Kinetic Cloud Logins **URL:** \ **Category:** Kinetic ERP\ **Tags:** users, cloud, security\ **Created:** [February 5, 2026, 12:48pm UTC](https://www.epiusers.help/t/kinetic-cloud-logins/132539 "2026-02-05T12:48:22Z")\ **Posts on this page:** 18\ **Page:** 4
**Author:** ![utaylor](https://www.epiusers.help/user_avatar/www.epiusers.help/utaylor/32/64664_2.png) [@utaylor](https://www.epiusers.help/u/utaylor)\ **Post date:** [March 27, 2026, 12:06pm UTC](https://www.epiusers.help/t/kinetic-cloud-logins/132539/61 "2026-03-27T12:06:01Z")
I do wonder why they require that… there has to be some reason. ---
**Author:** ![FTI-SeniorAdmin](https://www.epiusers.help/user_avatar/www.epiusers.help/fti-senioradmin/32/94053_2.png) [@FTI-SeniorAdmin](https://www.epiusers.help/u/FTI-SeniorAdmin)\ **Post date:** [March 27, 2026, 12:45pm UTC](https://www.epiusers.help/t/kinetic-cloud-logins/132539/62 "2026-03-27T12:45:25Z")
> [@markdamen](#): > > No support ticket required to enable - IdP enabled out of the box for Cloud I did not see IDP as an already enabled method of logging into Kinetic Cloud, I was also told that I would have to open a support ticket to enable IdP in my environment. Now it is possible that once IdP is enabled it doesn’t need to be re-enabled after each pass during my conversion, as AAD appears to. I don’t know the answer to that since I didn’t go that route. In addition, wouldn’t you also need to create users somewhere in Epicor Identity or EpicWeb for all of those that you wish to link to Kinetic, or O365? I must have followed part of the IdP setup path when I was starting all of this because when I login to EpicWeb or Epicare using my Epicor Identity, I do see this… ![Screenshot 2026-03-27 083922](https://www.epiusers.help/uploads/default/original/3X/4/3/43f862deb1d78fe27e25f91e3734931005a45fdd.png) ![Screenshot 2026-03-27 083941](https://www.epiusers.help/uploads/default/original/3X/c/f/cff2f10dc9c98a40764f362f669e31f7fb6f52ac.png) I’m going to work with what I have setup now and see how things go. If we feel that moving to IdP in the future is an easier way for login or we have issues with AAD then I’ll revisit this. ---
**Author:** ![FTI-SeniorAdmin](https://www.epiusers.help/user_avatar/www.epiusers.help/fti-senioradmin/32/94053_2.png) [@FTI-SeniorAdmin](https://www.epiusers.help/u/FTI-SeniorAdmin)\ **Post date:** [March 27, 2026, 12:46pm UTC](https://www.epiusers.help/t/kinetic-cloud-logins/132539/63 "2026-03-27T12:46:43Z")
> [@utaylor](#): > > I do wonder why they require that… there has to be some reason. Maybe I should submit an Epicor Idea to have that Tenant ID requirement removed and defaulted just like it does for Basic login. ---
**Author:** ![markdamen](https://www.epiusers.help/user_avatar/www.epiusers.help/markdamen/32/54917_2.png) [@markdamen](https://www.epiusers.help/u/markdamen)\ **Post date:** [March 27, 2026, 12:48pm UTC](https://www.epiusers.help/t/kinetic-cloud-logins/132539/64 "2026-03-27T12:48:46Z")
All new Cloud environments that I’ve seen in recent years have IdP enabled out of the box, and you’re correct it doesn’t lose that between refreshes or upgrades. Yes users would need to be created in IdP but the system does that itself from User Account Maintenance within Kinetic, when you select Export to IDP from the actions menu. I think also that IDP and AAD on the app server config are mutually exclusive - so the fact you’ve asked for AAD to be setup, does mean you won’t currently be seeing IDP. Good luck, if you need any more info on this method do ask as I’m sure it will benefit others too. ---
**Author:** ![FTI-SeniorAdmin](https://www.epiusers.help/user_avatar/www.epiusers.help/fti-senioradmin/32/94053_2.png) [@FTI-SeniorAdmin](https://www.epiusers.help/u/FTI-SeniorAdmin)\ **Post date:** [March 27, 2026, 12:55pm UTC](https://www.epiusers.help/t/kinetic-cloud-logins/132539/65 "2026-03-27T12:55:01Z")
> [@markdamen](#): > > I think also that IDP and AAD on the app server config are mutually exclusive - so the fact you’ve asked for AAD to be setup, does mean you won’t currently be seeing IDP. So I have AAD setup on my Live instance since I had it configured in the DB to point to the applications and Azure Tenant ID… However I did not set that up in my Pilot environment so they did not enable AAD there. When I visit that URL this is all I see. I have no other options other than Basic login. This is what my Live login prompt also looked like prior to asking for AAD to be enabled. So judging off that login screen that means IdP was not enabled out of the box. ![image](https://www.epiusers.help/uploads/default/original/3X/4/6/4691a11ac901b0173401746d53825119809a7208.png) ---
**Author:** ![aosemwengie1](https://www.epiusers.help/user_avatar/www.epiusers.help/aosemwengie1/32/95533_2.png) [@aosemwengie1](https://www.epiusers.help/u/aosemwengie1)\ **Post date:** [March 27, 2026, 12:58pm UTC](https://www.epiusers.help/t/kinetic-cloud-logins/132539/66 "2026-03-27T12:58:06Z")
> [@FTI-SeniorAdmin](#): > > Maybe I should submit an Epicor Idea to have that Tenant ID requirement removed and defaulted just like it does for Basic login. Its already been rejected because “security” ---
**Author:** ![FTI-SeniorAdmin](https://www.epiusers.help/user_avatar/www.epiusers.help/fti-senioradmin/32/94053_2.png) [@FTI-SeniorAdmin](https://www.epiusers.help/u/FTI-SeniorAdmin)\ **Post date:** [March 27, 2026, 12:59pm UTC](https://www.epiusers.help/t/kinetic-cloud-logins/132539/67 "2026-03-27T12:59:50Z")
> [@aosemwengie1](#): > > Its already been rejected because “security” That makes no sense… Make it so you have to give out your Epicor Account number to every user who needs to login, because that’s secure… An assembler should not need to know that number lol ---
**Author:** ![aosemwengie1](https://www.epiusers.help/user_avatar/www.epiusers.help/aosemwengie1/32/95533_2.png) [@aosemwengie1](https://www.epiusers.help/u/aosemwengie1)\ **Post date:** [March 27, 2026, 1:00pm UTC](https://www.epiusers.help/t/kinetic-cloud-logins/132539/68 "2026-03-27T13:00:20Z")
Hence security in quotes. ---
**Author:** ![jbooker](https://www.epiusers.help/user_avatar/www.epiusers.help/jbooker/32/83580_2.png) [@jbooker](https://www.epiusers.help/u/jbooker)\ **Post date:** [March 27, 2026, 1:00pm UTC](https://www.epiusers.help/t/kinetic-cloud-logins/132539/69 "2026-03-27T13:00:57Z")
> [@FTI-SeniorAdmin](#): > > you will see this screen first You get that screen when you nav directly to [https://yourcompanyname-live.epicorsaas.com/Apps/Erp/Home](https://yourcompanyname-live.epicorsaas.com/Apps/Erp/Home) ? I’m curious because I honestly don’t know the AAD Cloud experience (w/o IdP). Seems dumb, my tenant can be derived from the url. ---
**Author:** ![FTI-SeniorAdmin](https://www.epiusers.help/user_avatar/www.epiusers.help/fti-senioradmin/32/94053_2.png) [@FTI-SeniorAdmin](https://www.epiusers.help/u/FTI-SeniorAdmin)\ **Post date:** [March 27, 2026, 1:01pm UTC](https://www.epiusers.help/t/kinetic-cloud-logins/132539/70 "2026-03-27T13:01:58Z")
> [@aosemwengie1](#): > > Hence security in quotes. Yeah this is the same support team that said even with AAD enabled and SSO required checked off you can still use basic LOL ---
**Author:** ![FTI-SeniorAdmin](https://www.epiusers.help/user_avatar/www.epiusers.help/fti-senioradmin/32/94053_2.png) [@FTI-SeniorAdmin](https://www.epiusers.help/u/FTI-SeniorAdmin)\ **Post date:** [March 27, 2026, 1:02pm UTC](https://www.epiusers.help/t/kinetic-cloud-logins/132539/71 "2026-03-27T13:02:43Z")
> [@jbooker](#): > > You get that screen when you nav directly to > > [https://yourcompanyname-live.epicorsaas.com/Apps/Erp/Home](https://yourcompanyname-live.epicorsaas.com/Apps/Erp/Home) ? > > I’m curious because I honestly don’t know the AAD Cloud experience (w/o IdP). > > Seems dumb, my tenant can be derived from the url. Yes, and Yes… I agree 100% ---
**Author:** ![aosemwengie1](https://www.epiusers.help/user_avatar/www.epiusers.help/aosemwengie1/32/95533_2.png) [@aosemwengie1](https://www.epiusers.help/u/aosemwengie1)\ **Post date:** [March 27, 2026, 1:02pm UTC](https://www.epiusers.help/t/kinetic-cloud-logins/132539/72 "2026-03-27T13:02:45Z")
Even more dumb, the first time you launch the client you have to put in the tenant ID too. Like the client is literally installed on your desktop with a custom configuration file that is for your specific app server. And you still have to enter it. ---
**Author:** ![FTI-SeniorAdmin](https://www.epiusers.help/user_avatar/www.epiusers.help/fti-senioradmin/32/94053_2.png) [@FTI-SeniorAdmin](https://www.epiusers.help/u/FTI-SeniorAdmin)\ **Post date:** [March 27, 2026, 1:04pm UTC](https://www.epiusers.help/t/kinetic-cloud-logins/132539/73 "2026-03-27T13:04:55Z")
> [@aosemwengie1](#): > > Even more dumb, the first time you launch the client you have to put in the tenant ID too. Like the client is literally installed on your desktop with a custom configuration file that is for your specific app server. And you still have to enter it. That’s ok tho, they’re killing the client in May, oh wait no, now it’s July?.. 😆 ---
**Author:** ![jbooker](https://www.epiusers.help/user_avatar/www.epiusers.help/jbooker/32/83580_2.png) [@jbooker](https://www.epiusers.help/u/jbooker)\ **Post date:** [March 27, 2026, 1:05pm UTC](https://www.epiusers.help/t/kinetic-cloud-logins/132539/74 "2026-03-27T13:05:11Z")
Just plain lazy. There’s surely no technical reason it must be like this. ---
**Author:** ![jbooker](https://www.epiusers.help/user_avatar/www.epiusers.help/jbooker/32/83580_2.png) [@jbooker](https://www.epiusers.help/u/jbooker)\ **Post date:** [March 27, 2026, 1:16pm UTC](https://www.epiusers.help/t/kinetic-cloud-logins/132539/75 "2026-03-27T13:16:24Z")
> [@jbooker](#): > > Has anyone tried Intune kiosk configuration on an AAD joined device with MES url as an auto-startup Edge app? Guess I’ll put testing this on the back burner. If they’re injecting a non-standard tenant text box, that’s not seamless AAD. I cannot imagine Edge App windows integrated SSO on AAD-joined device can work with that. Shame. ---
**Author:** ![chaddb](https://www.epiusers.help/user_avatar/www.epiusers.help/chaddb/32/89855_2.png) [@chaddb](https://www.epiusers.help/u/chaddb)\ **Post date:** [March 27, 2026, 1:36pm UTC](https://www.epiusers.help/t/kinetic-cloud-logins/132539/76 "2026-03-27T13:36:56Z")
> [@jbooker](#): > > I cannot imagine Edge App windows integrated SSO on AAD-joined device can work with that. Shame. Wouldn’t think so either. ---
**Author:** ![markdamen](https://www.epiusers.help/user_avatar/www.epiusers.help/markdamen/32/54917_2.png) [@markdamen](https://www.epiusers.help/u/markdamen)\ **Post date:** [March 27, 2026, 2:25pm UTC](https://www.epiusers.help/t/kinetic-cloud-logins/132539/77 "2026-03-27T14:25:53Z")
@FTI-SeniorAdmin when did you go live on Cloud? For earlier customers of ours that went to Cloud we did have to request IdP be enabled - but now it definitely seems to be part of the standard setup. ---
**Author:** ![FTI-SeniorAdmin](https://www.epiusers.help/user_avatar/www.epiusers.help/fti-senioradmin/32/94053_2.png) [@FTI-SeniorAdmin](https://www.epiusers.help/u/FTI-SeniorAdmin)\ **Post date:** [March 27, 2026, 2:38pm UTC](https://www.epiusers.help/t/kinetic-cloud-logins/132539/78 "2026-03-27T14:38:01Z")
We are not live yet, we just signed our upgrade program/contract on March 1st. We have only had our readiness calls and whatnot at the beginning of this month. We got our URL’s and login info on March 10th. My biggest concern with all of this is the fact that we have CUI info in our DB so I can not send them a copy of our DB if our cloud login page and ID’s are not protected by MFA, that was what triggered all of this testing and setup for the logins even for just a first pass to be completed. [Previous page](https://www.epiusers.help/t/kinetic-cloud-logins/132539.md?page=3)