Skip to main content
SupportWise separates authentication from authorisation. Authentication establishes who the user is, while SupportWise workspace memberships and permissions determine what that user can access.

​
Authentication

SupportWise currently supports password-based authentication, Google sign-in and Microsoft Entra Sign-in for authorised users. Authentication options may vary by deployment and school configuration.

​
Authorisation

Access is controlled through:
  • workspace memberships;
  • role and permission groups;
  • learner and year-level scope where configured;
  • linked support-staff or teacher records for their respective portals; and
  • revocation of memberships and invitations when access is no longer required.
A successful sign-in does not automatically grant access to a school workspace.

​
School-managed access lifecycle

Schools should nominate authorised administrators to manage invitations, roles and offboarding. When a staff member changes role or leaves the school, their SupportWise access should be reviewed and revoked as part of the school’s normal offboarding process.

​
Least privilege

Assign users only the permissions required for their role. SupportWise supports granular permissions so administrative capability does not need to be granted to every user.