Help & Support

Timetabling Solutions V10 uses a single, fixed Entity ID and Enterprise Application identifier: https://auth.timetabling.education

Because the Entity ID is global, only one copy of the Enterprise Application can exist within an Entra ID tenant. Entra treats this identifier as unique across the entire tenant.

This means:

• You cannot create separate Enterprise Applications in Entra for each school

• All schools under the same Entra tenant must authenticate through the one Enterprise Application

• Each school is differentiated inside Timetabling Solutions rather than within Entra ID

How to Support Multiple Schools Within One Entra Tenant

1. Keep One Enterprise Application

• Maintain the existing Timetabling Solutions Enterprise Application within your Entra tenant

• All schools will authenticate through this single application

2. Assign Users from Each School to the Same Enterprise Application

In the Azure Portal, navigate to:

Azure Portal > Enterprise Applications > Timetabling Solutions > Users and Groups

Add the appropriate Entra groups for each school, for example:

• A security group for School A users

• A security group for School B users

• Optional: separate groups for administrators and standard users

These assignments control which users are permitted to sign in.

3. Each School Uses Its Own Timetabling Solutions Instance

School separation occurs within the Timetabling Solutions platform. After sign-in, the system:

• Reads the authenticated user’s UPN

• Maps the user to the correct school based on existing configuration

• Ensures users only access their own school’s data

No school-specific or domain-specific Enterprise Applications are required.

4. If a School Changes Email Domains
When a school updates its email domain and changes user UPNs:

• Update user UPNs in Entra ID

• Timetabling Solutions will then update corresponding user identities in the Timetabling Solutions database

• No changes are required to the Enterprise Application itself

5. Applying Conditional Access Policies
Schools can be further isolated or restricted using Conditional Access policies applied to their respective security groups, including:

• School-specific access controls

• MFA requirements

• Sign-in frequency settings

• Device or network restrictions

These policies operate independently for each school, as each has its own security group.

Summary

• Timetabling Solutions V10 uses a global Entity ID and only one Enterprise Application per Entra tenant

• All schools under the same Entra tenant must authenticate through this single application

• School separation is managed within Timetabling Solutions, not in Entra configuration

• Assign each school’s user group to the Enterprise Application to support multiple schools in the same tenant

If you require further assistance, please contact Timetabling Solutions Support.