- 19 May 2022
- 1 Minute to read
- Print
- DarkLight
- PDF
Microsoft Azure AD Integration Setup
- Updated on 19 May 2022
- 1 Minute to read
- Print
- DarkLight
- PDF
Login to your Azure account.
Using the search bar in the top middle of the screen look for Azure Active Directory and click on the Service.
Using the left sidebar navigate to App registrations.
Click + New registration
Name the registration whatever you wish.
For the Redirect URI select Single-page application (SPA) as your platform and enter https://<your-esign-domain-here>/cp/access/azure as the value. The <your-esign-domain-here> would be current domain in the browser address bar above.
Click Register, then click on Authentication on the sidebar
Enter https://<your-esign-domain-here>/cp as the Front-channel logout URL. The <your-esign-domain-here> would be current domain in the browser address bar above.
Ensure that ID tokens (used for implicit and hybrid flows) is checked.
Click Save and navigate to the Overview page in the right-hand column.
Make note of the Application (client) ID and Directory (tenant) ID values, we will need them later to add the Azure integration.
These steps are for on-prem only. Skips these steps if you are a Saas customer.
Add the following lines to Pronto_CP section of your ProntoConfig.ini file:
[PRONTO_CP]
ShowAzureButton=1
Restart services and IIS to ensure these properties are applied.
Login into the CP with either a System-Wide Admin, and Account-Wide Admin, or a Group Admin User account type and then navigate to the "Account > Integrations" section. Click on the green Add Integration button. You will see the following dialog. Type out a unique name for your integration, select Microsoft Azure for the Provider, paste in your Tenant ID and Client ID.
Then you'll need to set up a user. Navigate to the "Account > Users" section, click to edit a user, go to the SSO Logins tab on the left side navigation, click the Add SSO Login button, enter the Microsoft Azure username, select the Microsoft Azure integration name you defined in the previous section, and then click Update User to save the changes.
Once you have all the above configurations, when you go to the CP login screen, you'll now see a new button for Microsoft login:
When you click on the Microsoft button, you'll be presented with a Microsoft Azure AD Username prompt:
Once you enter in your username and click continue, you'll be prompted to log into your Microsoft account.