Sign-in help
A picture guide to sign in to S2T PMS (Skills2Talent), OKR Stars and USR Apps. Because USR INFOTECH serves your PMS directly, you get every sign-in option: your own USR login with password reset, Microsoft, Google, Slack and company SSO. Nothing depends on one link from your HR software. IT teams will find setup guides at the end.
Sign in with your Microsoft work account
For companies that use Microsoft 365 (Outlook, Teams) for work email.
Questions
Microsoft says "Need admin approval".
Your company's IT admin must allow the USR app once for everyone. Send them the email for your IT team. Until then, sign in with your USR login.
Microsoft signed me in, but the PMS says my account is not found.
Your Microsoft email is different from the email in the PMS. Ask your HR admin to correct it, or raise a support ticket. Signed in to the wrong account? Use "Sign in with another account" or a private window.
Our company does not use Microsoft 365.
Use Continue with Google, or email and password.
Can we get PMS updates in Microsoft Teams?
Yes. CFR messages post PMS updates and OKR check-ins to the Teams channels you choose. See Teams and Slack messages.
Sign in with your Google work account
For companies that use Google Workspace (Gmail) for work email.
Questions
Google says access is blocked or the app is not allowed.
Your Google Workspace admin restricts outside apps. Ask your IT team to allow it using the Google Workspace steps. Until then, sign in with email and password.
I signed in but the PMS says my account is not found.
The Google email is different from the email in your PMS. Raise a support ticket and we update it.
Learn more about Sign in with Google.
How Sign in with Google works (Google Help).
Company SSO (USR SSO)
For companies that set up single sign-on (SAML) with USR INFOTECH.
Sign in with your USR login (email and password)
Works for everyone, on any device, with or without Microsoft, Google or SSO.
Questions
What is my user ID?
Usually your work email. Some companies use an employee ID instead. Your HR team can confirm which one was set up for you.
I never got a welcome email or temporary password.
Ask your HR team to resend your invite, or raise a support ticket. Check your spam or junk folder first.
My account is locked after too many tries.
Wait a few minutes and try again, or use Forgot password to set a new one. If it is still locked, raise a support ticket.
How do I change my password after I sign in?
Open your profile settings and choose change password. Use a password you do not use anywhere else.
Is "Remember me" safe?
Yes, on your own computer or phone. Do not tick it on a shared or public computer, and sign out when you finish.
Forgot or reset your password
Takes about a minute. Your goals, reviews and history do not change.
Keep your PMS one click away
On your desktop, Start menu or Dock, phone home screen and browser tabs, in Chrome, Edge, Firefox or Safari.
Sign in with Slack
For companies that work mainly in Slack.
For IT teams
Every sign-in and messaging integration below is included in your USR PMS subscription at no extra charge, for aim performance, OKR Stars and Skills2Talent. Set up only the ones your organisation uses.
| Integration | What it does | Who sets it up | Typical effort |
|---|---|---|---|
| Microsoft 365 (Entra ID) sign-in | Employees sign in with their Microsoft work account | Microsoft 365 / Entra ID admin | 30 to 45 min, plus a joint test with USR |
| Google Workspace sign-in | Employees sign in with their Google work account | Google Workspace admin, only if third-party apps are restricted | 5 to 10 min |
| Sign in with Slack | Employees sign in with their Slack account | Slack admin (approval only) | 5 min |
| Microsoft Teams CFR messages | PMS updates and OKR check-ins posted to Teams channels | Microsoft 365 admin with HR admin | 15 to 20 min |
| Slack CFR messages | PMS updates and OKR check-ins posted to Slack channels | Slack admin with HR admin | 10 to 15 min |
Why your admin does this, not USR: Microsoft, Google and Slack let only your own administrator decide which apps your accounts trust. That keeps your accounts under your control. USR never sees or stores Microsoft, Google or Slack passwords. Sign-in reads only name, email and a unique user ID.
Microsoft 365 / Microsoft Entra ID (formerly Azure Active Directory)
You need: the Application Administrator or Cloud Application Administrator role (Global Administrator or Privileged Role Administrator to grant consent), and the Redirect URI and login link for your organisation from USR Support. They are unique to your organisation. Work in the Microsoft Entra admin center.
- Register the USR app. Identity → Applications → App registrations → + New registration. Name: for example
USR PMS SSO. Account type: Accounts in this organizational directory only (Single tenant). Redirect URI: platform Web, paste the URI from USR Support exactly. Click Register, then copy the Application (client) ID and Directory (tenant) ID. Microsoft guide - Create a client secret. Certificates & secrets → Client secrets → + New client secret, expiry 12 months. Copy the Value (not the Secret ID) at once; it is shown only once. Set a reminder 30 days before it expires.
- Add permissions and grant consent. API permissions → + Add a permission → Microsoft Graph → Delegated:
openid,profile,email,User.Read. Then click Grant admin consent so employees see no approval prompt. USR does not ask for mail, files, calendar or Teams data for sign-in. Microsoft guide - Recommended: send the email in the token. Token configuration → + Add optional claim → ID, tick
emailandupn. - Recommended: choose who can sign in. Enterprise applications → [your app] → Properties → Assignment required → Yes, then add a group such as PMS-Users under Users and groups. Start with 3 to 5 pilot users, including one HR admin and one manager. Microsoft guide
- Share the details securely. Email the tenant ID, client ID, primary email domain, secret expiry date and pilot users to support@usrinfo.tech. Send the secret Value separately: a one-time secret link, a password-protected file, or entered together on a screen-share. Never in the same email, a chat or a screenshot.
- Test together and go live. USR confirms the setup within 2 working days and books a 30-minute test call. Pilot users sign in, then USR turns on Microsoft sign-in for everyone. Your MFA and Conditional Access policies apply as usual. Microsoft guide
| Employees see | Usual cause | Fix |
|---|---|---|
| AADSTS50011 (redirect URI mismatch) | Redirect URI differs from the one USR sent | Paste it again exactly under Authentication; check for a trailing slash |
| AADSTS700016 (application not found) | Wrong client or tenant ID, or app made in another tenant | Check both IDs on the app Overview page and resend |
| AADSTS65001 or "Need admin approval" | Admin consent not granted | Step 3 |
| AADSTS50105 (user not assigned) | Assignment required is on and the user is not in the group | Step 5 |
| AADSTS7000215 / 7000222 (invalid or expired secret) | Secret ID sent instead of Value, or secret expired | Create a new secret and share the Value securely |
| Signed in, but the PMS says account not found | Microsoft email differs from the PMS email | HR admin corrects the PMS email, or IT does step 4 |
| Signed in to the wrong Microsoft account | Browser remembered a personal or other account | Use "Sign in with another account" or a private window |
Secret renewal: when the client secret expires, Microsoft sign-in stops for everyone. At least 30 days ahead, create a new secret (keep the old one active), share the new Value securely, wait for USR to confirm a test sign-in, then delete the old secret. Other codes: Microsoft Entra error codes
Google Workspace
In most organisations no setup is needed: employees click Continue with Google and use their work account. Do this only if employees see "Access blocked" or "app blocked by your admin". You need a Google Workspace super admin.
- Ask USR Support for the USR Google Client ID for your product.
- Open admin.google.com → Security → Access and data control → API controls → Manage Third-Party App Access.
- Add app → OAuth App Name Or Client ID, paste the USR Client ID, search and select the USR app.
- Choose the scope (whole organisation, or the organisational unit that uses the PMS), set access to Trusted and click Finish.
- Tell USR Support you are ready. 3 to 5 pilot users test from your organisation's login link, then announce it to everyone.
Google shares only the employee's name, email and profile picture. Google guide: control which third-party apps access Google Workspace data
Slack
- Check emails: each employee's Slack profile email matches the PMS employee list.
- Approve the app, if your workspace needs approval: the first person to connect sees "request sent to admin". Your Slack admin opens Settings & administration → Manage apps → Requests and clicks Approve for the USR app.
- Enable and test: tell USR Support you are ready; 3 to 5 pilot users test from your organisation's login link.
One approval covers both Slack sign-in and Slack CFR messages. Slack guide: manage app approval
Email for your IT team
HR teams can copy this and send it to IT:
Security
Passwords stay with Microsoft, Google or Slack. USR INFOTECH never sees or stores them. The client secret is kept encrypted in USR's identity service, not in email. USR INFOTECH is ISO/IEC 27001 and ISO/IEC 42001 certified and DPDP Ready.
PMS and OKR updates in Microsoft Teams or Slack (CFR messages)
CFR means Conversations, Feedback and Recognition. When something you choose happens in the PMS, a short message is posted to a Teams or Slack channel, so managers and peers see progress and recognise good work without opening the PMS. Included at no extra charge.
| Event | A message is posted when |
|---|---|
| Updates added in PMS | An employee or manager adds a progress update |
| Objective or key result check-ins | Someone records progress on an OKR |
| Objective or key result closed | An OKR is marked complete or closed |
You choose the events for each channel, for example check-ins in a team channel and only closed objectives in a company-wide channel.
Microsoft Teams
- Create a team and channel for the messages (for example PMS-OKR-CFR). Have a Global Administrator ready to grant consent.
- Copy your Primary domain from Entra admin center → Overview (for example yourcompany.onmicrosoft.com).
- Your HR admin opens Microsoft Teams Integration in the PMS (USR Support shares the link), enters that domain as the Organization Directory and clicks Login via Microsoft Teams.
- The admin signs in, ticks Consent on behalf of your organization and clicks Accept.
- Tick each channel, choose its events and click Update selected. Record a test check-in to confirm.
Microsoft sign-in and Teams messages are separate connections. Your IT team can review or remove the app any time in Entra admin center → Enterprise applications → USR app → Permissions.
Slack
- Your HR admin opens Slack Integration in the PMS and clicks Add to Slack.
- Check the workspace name at the top right, review what the app can do, and click Allow (or your Slack admin approves it).
- Private channels only: type
/invite @USR PMSin the channel. - Tick each channel, choose its events, click Update selected, and record a test check-in.
Messages stopped or a channel is missing.
A channel created after connecting, or one the connecting user is not a member of, does not show. Add the user to the channel, then reconnect from the integration page. If messages stop, the app may have been removed or the channel renamed; reconnect and select channels again, or raise a support ticket.
How do we disconnect?
In the PMS, untick the channels and click Update selected. To remove the app fully, delete it in Entra Enterprise applications (Teams) or Slack Manage apps, and let USR Support know.
Still need help?
Our support team replies with a ticket number and email updates. Please include your company name and a screenshot.