Setup Azure App registration
1. Login to the Azure console https://portal.azure.com/
2. Go to Azure Active Directory
3. Select App registration from the side menu
4. Click on New registration
5. Provide an application name
6. Select “Accounts in any organizational directory”
7. Under the Redirect URI, select Web and enter in the URI for your admin site.
8. Click the register button to continue
9. Select the Authentication menu item
10. Check the ID tokens (used for implicit and hybrid flows)
11. Select Accounts in this organization directory only
12. Click Save to save changes
13. Select API permissions from the menu
14. Click Add a permission
15. Scroll down and select Azure Active Directory Graph
16. Select Delegated permissions
17. Select the following:
Directory.AccessAsUser.All
User.Read
User.ReadBasic.All
18. Click Add permissions to continue
19. Click Grant admin consent for domain tenant
20. Select the Certificates & secrets from the side menu
21. Click New client secret
22. Enter a Description and Expires date
23. Click add to continue
24. Copy the client secret and paste it somewhere you can copy it for later.
25. Select Overview from the side menu
26. Copy the Application (client) ID for use in the Edsembli Application
Enabling Azure Authentication within edsembli SIS
1. Login to edsembli SIS as an administrator.
2. Select “Security - Authentication Types” then click the “+” button to add a new authentication type.
3. On the General tab provide a name for the authentication type and select “Azure Active Directory”
4. On the “Configuration” tab copy and paste the application Client ID and secret and enter the authorization endpoint for your Azure active directory.
Example: https://login.microsoftonline.com/yourdomain.onmicrosoft.com.
Also provide the name of the claim that will be used to match the user account name in the edsembliSIS. The “name” claim is the AD account name the “upn” claim is the AD login name (email address).
5. Click save.
6. On the login page you will now have the option to select Azure AD authentication.
Note: The edsembli user account’s Authentication type must be set to Azure AD in order to login successfully.
