teechr for IT teams

Last updated: 16 September 2026

Lecturers at your organization can sign in to teechr with their Microsoft work or school account. If your organization lets only administrators approve apps, they see Microsoft's "Need admin approval" message instead, until one of you approves teechr. It takes a minute. teechr gets nothing more than a person's name and email address when they sign in.

Approve teechr for your organization

This opens Microsoft's approval page. Sign in there with an administrator account (see who can approve).

At a glance

App

teechr

Publisher

KERAPPS, verified by Microsoft (publisher domain kerapps.com)

Application (client) ID

c2c81501-5451-47c5-b3af-0421934608f8

Protocol

OpenID Connect on the Microsoft identity platform (v2.0 endpoints), with the authorization code flow and PKCE, from a confidential web app

Accounts

Work or school accounts from any Microsoft Entra ID organization, and personal Microsoft accounts

Provisioning

None needed. A teechr account is created the first time someone signs in.

Other ways in

Google, or an email address and password

What teechr asks for, and why

These are delegated permissions, read once from the ID token when someone signs in. teechr doesn't use Microsoft Graph. It can't read mail, files, calendars or anyone else in your directory, and it keeps no Microsoft access or refresh tokens. It identifies each person by your tenant ID and their object ID, not by their email address alone.

teechr also reads the xms_edov claim, which says whether your organization has verified the domain of the person's address. When it hasn't, teechr confirms the address once, with a code sent to it.

Who can approve

Approving teechr for everyone takes one of these Microsoft Entra roles: Global Administrator, Privileged Role Administrator, Cloud Application Administrator, Application Administrator or AI Administrator, or a custom role allowed to grant permissions to applications. Microsoft asks anyone else to sign in with an administrator's account.

Set it up

1. Select Approve teechr for your organization above, and sign in with an administrator account.
2. Check the three permissions and select Accept. Microsoft sends you back to this page, and the line beside the button says whether the approval went through.
3. That's all. teechr now appears in the Microsoft Entra admin center under Enterprise apps, and people in your organization can sign in without being asked.

To let only some people in, open teechr in Enterprise apps, set Assignment required? to Yes under Properties, then add the people or groups under Users and groups.

To review the approval, open teechr in Enterprise apps and select Permissions under Security. To remove teechr, select Delete under Properties. That stops Microsoft sign-in to teechr for your organization, but doesn't delete anyone's teechr account. To have accounts deleted, email us.

Try it with a pilot group

1. Set Assignment required? to Yes and assign a pilot group, as above.
2. A pilot user opens teechr.co, selects Get started, then Continue with Microsoft, and signs in with their work account. They land in their own teechr studio.
3. Someone outside the group gets Microsoft's error AADSTS50105. That means assignment is working.
4. When you're ready, assign more people, or set Assignment required? back to No.

Licensing

• Microsoft: no extra license. Sign-in works with every Microsoft Entra ID edition, including Free.
• teechr: each lecturer has their own account. The first lesson is free. After that, plans start at €7.99 a month, VAT included; see Pricing. Students watch lessons without an account.

Troubleshooting

Support

Email hello@teechr.co. Include the error code, the time it happened, and the Correlation ID from Microsoft's error page when there is one. How teechr handles personal data is explained in the privacy policy.