The ENT CESI relies on the Microsoft 365 ecosystem, but the login experience varies significantly depending on whether you are using a PC, an Android smartphone, or an iPhone. The entry point remains the portal ent.cesi.fr, which redirects to a centralized authentication layer through the technical domains wayf.cesi.fr or sts.viacesi.fr, depending on the path. Understanding these mechanisms prevents most of the issues encountered during the first login.
ENT CESI Authentication: What Happens Between the Browser and Azure AD
The majority of guides focus on the visible steps (entering the username, clicking “Log in”). The rarely documented point concerns the technical redirection. When you access ent.cesi.fr, the platform switches to the Microsoft Azure AD infrastructure of the CESI group. This redirection goes through wayf.cesi.fr or sts.viacesi.fr depending on your profile (student, apprentice, staff).
This mechanism explains why an ad blocker or a corporate firewall can interrupt the connection without displaying an explicit error message. The browser attempts to reach a third-party domain (login.microsoftonline.com), and if this request is blocked, the page remains in indefinite loading.
For those looking for a detailed tutorial, it is possible to log in to the ENT CESI from Apprendissimo with a comparison by device type.
ENT CESI Login by Device: Table of Concrete Differences
The accessible features vary depending on the device and the access mode chosen. The table below summarizes the observed differences.
| Criterion | PC / Mac (browser) | Android (app or browser) | iPhone / iPad (browser only) |
|---|---|---|---|
| Main access mode | Web browser (Edge, Chrome, Firefox) | ENT CESI app (Google Play) or browser | Safari or Chrome, no dedicated app |
| Document synchronization | Integrated OneDrive, native access to files | Separate OneDrive app recommended | OneDrive via separate app or browser |
| Push notifications | None (except Outlook desktop) | Available via the ENT CESI app | No native push notifications |
| Multi-factor authentication | Microsoft Authenticator or SMS | Microsoft Authenticator or SMS | Microsoft Authenticator or SMS |
| Dedicated mobile app | Not applicable | Yes, published on Google Play | None on the App Store |
The most notable gap concerns iOS. No ENT CESI app exists on the App Store, which deprives iPhone and iPad users of push notifications and simplified access. On Android, the app published on Google Play (developed by “Youssef”) uses the same Microsoft 365 credentials as the web portal.
What the Android App Offers Compared to the Browser
The Android app does not replace the browser for all tasks. It provides quick access to the schedule and notifications, but complete document management (file uploads, viewing heavy educational resources) remains smoother via a browser on a large screen.
However, the push notifications from the Android app are a real advantage for tracking schedule updates or messages from trainers without manually opening the portal.
Common Connection Issues with ENT CESI and Technical Solutions
Connection problems with the ENT CESI follow recurring patterns, often related to the Microsoft layer rather than the CESI portal itself.
- Redirection blocked by a proxy or firewall: on a corporate network, the domains login.microsoftonline.com, wayf.cesi.fr, and sts.viacesi.fr must be allowed. Without this, the login page never appears.
- Corrupted browser cache after a password change: the browser retains an expired authentication token. Clearing the cache and cookies for the domain microsoftonline.com resolves the issue in most cases.
- Multi-factor authentication not configured: if your account requires validation by Microsoft Authenticator and the app is not installed, the login fails after entering the password without a clear message.
- Outdated mobile browser: on both Android and iOS, an outdated browser may mishandle the OAuth redirection to Azure AD. Updating Chrome or Safari fixes most cases.
The Special Case of iPadOS Tablets
iPad tablets display the desktop version of the ENT CESI portal by default, thanks to Safari’s “desktop” mode being automatically enabled. This feature is an advantage: the interface is identical to that of a PC. The trap occurs when Safari requests reconnection after each prolonged sleep, as iPadOS deletes session tokens more aggressively than macOS.
Adding the portal ent.cesi.fr as a shortcut on the home screen does not resolve this issue, as the shortcut opens a standard Safari instance without extended session retention.
ENT CESI Connection Security: What Multi-Factor Authentication Changes
Multi-factor authentication (MFA) via Microsoft Authenticator is the same mechanism regardless of the device. The difference lies in the user experience. On PC, the MFA validation opens a pop-up window in the browser. On mobile, the Authenticator app receives a push notification that requests approval with a tap.
The main risk is losing access to the Authenticator app (changing phones, factory reset). In this case, CESI IT support must manually reset the MFA method associated with the account. This delay can take several business days, completely blocking access to the ENT and all associated Microsoft 365 tools.
Setting up a backup method (phone number to receive an SMS code) as soon as MFA is activated remains the most effective precaution to avoid this scenario.
The absence of a dedicated iOS app and the complete reliance on Microsoft Azure AD infrastructure make logging into the ENT CESI a more technical subject than it seems. Allowing the right domains on your network and configuring MFA from day one covers the vast majority of issues encountered by students and apprentices in the CESI group.
