With the Excel Add-In installed, you're ready to connect to Diligent data. This guide explains how the add-in works, how to open and authenticate Diligent workbooks, configure multi-factor authentication, and refresh data to ensure you're always working with current information.
How the Add-In Works
Understanding the connection architecture helps clarify how authentication, security, and data access work when using Diligent files.
Platform Overview
- Guest Users: Diligent users are Guest Users in EBM's Microsoft Entra (Azure AD) tenant, not full organizational members
- Data Source: Workbooks connect to tabular cubes hosted in Azure Analysis Services, not local files
- Security: Microsoft Entra security groups control which cubes you can access and what data you can see
- Live Connections: Data refreshes pull current information directly from Diligent's cloud infrastructure
Authentication & Security
When you open a Diligent workbook, the add-in authenticates you with EBM's Microsoft Entra tenant using your email address and Microsoft credentials. This happens seamlessly if:
- You've accepted the email invitation from EBM to join as a Guest User
- Your organization allows cross-tenant access to
TotalDynamicsSolutions.onmicrosoft.com - Your account hasn't been offboarded from the Diligent environment
🔒 Cross-Tenant Access Issues
If your organization blocks cross-tenant access, you'll see authentication failures when trying to connect. Contact your IT department to allow TotalDynamicsSolutions.onmicrosoft.com in your Microsoft Entra settings.
How the Add-In Behaves
- Auto-Detection: The add-in automatically detects when you open a Diligent workbook and initiates connection
- File Format: Modern Diligent files use .xlsx format (not .xlsm), making them cleaner and more secure
- On-Demand Connection: Data connections establish only when needed, reducing unnecessary authentication prompts
- DigiCert Signed: The add-in is digitally signed to ensure it hasn't been tampered with
💡 Remember: Administrator rights are only required to install the add-in, not to use it daily. Once installed, you can open and refresh Diligent files with standard user permissions.
Opening Diligent Workbooks
Opening Diligent workbooks is straightforward once the add-in is installed.
Download or Locate the File
Download the workbook from your shared location (email attachment, SharePoint, OneDrive, or network drive) to a folder on your computer.
Open in Excel
Double-click the .xlsx file to open it in Excel. If you see security warnings, click Enable Content or configure Trusted Locations (see Creating Trusted Locations in Excel).
Authenticate When Prompted
The add-in will prompt you to sign in with your Microsoft credentials. This connects you to Diligent's data sources securely.
The EBM Tab in Excel
When the add-in is active, you'll see an EBM tab in the Excel ribbon. This tab provides quick access to key functions:
| Button | Function |
|---|---|
| Refresh Data | Pulls the latest data from Diligent cubes and updates all pivot tables and charts |
| Connect to Cube | Opens a dialog to select and connect to different cubes you have access to |
Authentication Process
The first time you open a Diligent workbook, you'll go through a brief authentication process. For comprehensive details on signing in and account setup, see the Diligent Access and Setup Guide.
Basic Authentication Steps
Accept EBM Email Invitation
You should have received an email from Microsoft inviting you to access EBM's applications as a Guest User. Click the invitation link and accept.
Sign In with Microsoft Account
When prompted by the add-in, enter your email address and password. Use your organization's Microsoft credentials (the same account you use for email and Microsoft 365).
Link Account to EBM Workspace (If Prompted)
If this is your first time accessing Diligent, you may be prompted to link your account to the EBM workspace. Follow the on-screen prompts to complete this one-time setup.
Multi-Factor Authentication (MFA)
🔐 MFA is Not Required for All Users
Multi-Factor Authentication (MFA) is not enforced for all Diligent users. Some organizations require it for enhanced security, while others do not. If your organization does not enforce MFA, you can skip this section. If prompted for MFA during sign-in, follow the steps below.
Multi-Factor Authentication adds an extra layer of security to your Diligent account by requiring a second form of verification (in addition to your password) when you sign in.
Setting Up MFA
If your organization requires MFA, you'll be prompted to set it up the first time you sign in:
- Download Microsoft Authenticator: Install the Microsoft Authenticator app on your mobile device from the App Store (iOS) or Google Play (Android)
- Scan QR Code: During sign-in, scan the QR code displayed on screen with the Authenticator app
- Save Backup Codes: Microsoft will provide backup codes—save these in a secure location in case you lose access to your phone
Daily Sign-In with MFA
Once MFA is set up, you'll follow this process each time you sign in:
Enter Email and Password
Sign in with your normal Microsoft credentials.
Approve the Notification or Enter Code
Microsoft sends a notification to your Authenticator app. Tap Approve on your phone. Alternatively, enter the 6-digit code displayed in the app.
Optional: "Don't Ask Again for 14 Days"
You can check this option to skip MFA for 14 days on your current device. After 14 days, you'll be prompted again.
Alternative MFA Methods
Besides the Authenticator app, your IT department may configure these alternative methods:
- Text Message (SMS): Receive a code via text to your registered phone number
- Email: Receive a verification code via email (less common for security reasons)
- Phone Call: Receive an automated call with a verification code
MFA method availability is controlled by your organization's IT policies. Contact your IT department if you need to change methods or register additional devices.
MFA Troubleshooting
If you lose your phone or can't access your Authenticator app, contact your IT department immediately to reset your MFA registration.
Ensure your phone's time and date are set to automatic. MFA codes are time-sensitive and won't work if your device clock is off.
You cannot disable MFA yourself if your organization requires it. Contact your IT department if you believe MFA shouldn't apply to your account.
Refreshing Data
Diligent workbooks display a snapshot of data from the last refresh. To see current information, you must manually refresh.
Manual Refresh Process
- Open your Diligent workbook in Excel
- Click the EBM tab in the ribbon
- Click Refresh Data
- Wait for the refresh to complete (progress indicator appears)
- Verify pivot tables and charts now show updated values
What Happens During Refresh
- Queries the Cube: The add-in sends a query to the Diligent Analysis Services cube
- Verifies Credentials: Ensures your authentication is still valid (prompts for re-auth if expired)
- Applies Security: Row-level security filters data based on your permissions
- Updates Visuals: All pivot tables, charts, and formulas referencing cube data update automatically
⚠️ Large File Performance
Files larger than 50 MB may experience slow refresh times. Files over 100 MB often fail to refresh entirely. See Optimizing Large Excel Files for tips on reducing file size.
Working with Multiple Cubes
Some users have access to multiple Diligent cubes (e.g., Financial, Sales, Operations). You can switch between cubes within the same workbook.
Switching Cubes
- Click the EBM tab in the ribbon
- Click Connect to Cube
- Select the cube you want to connect to from the list
- Authenticate if prompted (credentials may be cached)
- Refresh data to pull information from the new cube
💡 Tip: If you don't see a cube you expect to have access to, contact your Diligent administrator. Cube access is controlled through Microsoft Entra security groups.
Common Workflows
Daily Reporting Workflow
- Open your saved Diligent workbook from a Trusted Location
- Click Refresh Data in the EBM tab
- Review updated pivot tables and charts
- Export or share findings as needed
- Save the file (data snapshot is preserved)
Monthly Analysis Workflow
- Download the latest version of your reporting template
- Open in Excel and allow the add-in to authenticate
- Refresh data to pull current month's figures
- Analyze trends using pivot tables and formulas
- Save a dated copy for record-keeping (e.g., "Sales_Analysis_Jan2026.xlsx")
First-Time Connection Workflow
- Accept EBM's email invitation to join as a Guest User
- Download and install the Excel Add-In (see Installing the Excel Add-In)
- Open a Diligent workbook and authenticate with your Microsoft credentials
- Set up MFA if prompted by your organization
- Configure Trusted Locations to eliminate future security warnings
- Test data refresh to confirm everything works
Next Steps
If you encounter connection issues, authentication loops, or other problems, the Troubleshooting article provides detailed solutions for common scenarios.
Related Articles
📚 Excel Add-In Article Suite
System requirements, installation process, and verification steps
Connecting to Diligent Data in Excel
Authentication, MFA setup, and data refresh workflows (current article)
Troubleshooting the Excel Add-In
Solutions for connection issues, disabled add-ins, and performance problems
📖 Additional Resources
- Diligent Access and Setup Guide - Comprehensive authentication and account setup
- Optimizing Large Excel Files - File size management and performance tips
- Microsoft Authenticator App Setup - Official Microsoft MFA documentation
Connecting to Diligent data in Excel is straightforward once the add-in is installed. The authentication process happens seamlessly in the background using your Microsoft credentials, and data refreshes with a single click. If you're setting up for the first time, allow a few minutes for the initial authentication and account linking—subsequent access will be much faster. For any connection issues or authentication problems, consult the Troubleshooting article or contact your IT department.
Comments
0 comments
Article is closed for comments.