Getting VESPA Academy 2.0 Ready for Your School

Approve SSO — Microsoft 365

VESPA Academy uses Microsoft's standard OAuth 2.0 sign-in so staff and students can click "Continue with Microsoft" on the login page. Most school Microsoft 365 tenants require an administrator to grant consent before users can sign in with a third-party app.

How to approve (Entra ID / Azure AD)

1. Sign in to the Microsoft Entra admin centre with a Global Administrator or Cloud Application Administrator account.
2. Navigate to Identity > Applications > Enterprise applications.
3. Search for "VESPA" in the application list. If you see it listed (it may appear as "VESPA Lite"), click on it.
4. Go to Permissions and click "Grant admin consent for [your organisation]".
5. Review the permissions — VESPA only requests:
   • openid — sign the user in
   • profile — read the user's name
   • email — read the user's email address
   No access to mailboxes, files, calendars, or any other Microsoft 365 data.
6. Click Accept. All users in your tenant can now sign in immediately.

Approve SSO — Google Workspace

If your school uses Google Workspace, staff and students can sign in by clicking "Continue with Google". Google Workspace admins may need to allow the app.

How to approve (Google Admin Console)

1. Sign in to the Google Admin Console with a Super Admin account.
2. Navigate to Security > Access and data control > API controls.
3. Under App access control, click "Manage third-party app access".
4. Click "Configure new app", then select "OAuth App Name Or Client ID".
5. Search for "VESPA Academy" and select it from the results.
6. Set the access level to Trusted and click Configure.
7. All users in your Google Workspace can now sign in immediately.

Network & Email Allowlisting

Please ensure the following domains are permitted through your school's web filter, firewall, and email filtering systems. Student activity access also requires Skiv (videos) and activity CDNs — not just the main app.

Core platform (required)

Videos — Skiv (required)

Student activities (required for assigned activities)

Single sign-on

Legacy / optional

Email safe-sender list

Fallback: Email & Password Login

If SSO approval is not possible immediately, users can still access VESPA Academy using email and password:

1. Go to app.vespa.academy/login
2. Click "Forgot password?"
3. Enter the email address associated with the VESPA account
4. A password reset link will be sent to that email
5. Click the link and set a new password

This works for both staff and students. SSO can be approved later — once approved, users can switch to "Continue with Microsoft" or "Continue with Google" at any time.

Data Protection, Privacy & AI Policies

The following policy documents are available for your DPO, data protection officer, or IT governance team. These cover how VESPA handles personal data, our AI usage, retention periods, and compliance with UK GDPR. View the full policies index for a complete list including corporate and procurement policies.

Need Help?

If you have any questions about the technical setup, or if your network configuration requires specific IP addresses or additional information, please contact us: