To facilitate setting up SSO via Azure AD (AAD), we need the following information:
1. Azure Tennant ID.
2. Azure Application ID (Instructions Below).
Users logging in from the configured company in iTWO cx will then be required to login with the AAD credentials.
It matches user accounts based on their email address.
To Get Azure Application ID
To get an Application ID, you will need to register an App under Azure Active Directory.
1. Login to the Azure Portal: https://portal.azure.com/
2. Select Azure Active Directory
3. Select App Registrations
4. New Application Registration
a. Name: iTWOcx SSO
b. Application Type: Native
c. Redirect URI: https://au.itwocx.com/cxR/Authentication
Edit Manifest File
1. Edit the manifest file – replyUrls:
| Code Block |
|---|
"replyUrls": [
"https://au.itwocx.com/"
], |
2. Edit the manifest file – requiredResourceAccess:
| Code Block |
|---|
"requiredResourceAccess": [
{
"resourceAppId": "00000002-0000-0000-c000-000000000000",
"resourceAccess": [
{
"id": "311a71cc-e848-46a1-bdf8-97ff7156d8e6",
"type": "Scope"
},
{
"id": "a42657d6-7f20-40e3-b6f0-cee03008a62a",
"type": "Scope"
}
]
},
{
"resourceAppId": "52e5f8a4-8b0e-455f-9df4-5beb7c37dd18",
"resourceAccess": [
{
"id": "5e626597-eec0-4695-8ddd-e3aa9e05f712",
"type": "Scope"
}
]
}
], |
3. Provide RIB with the Application ID and Tennant ID so we can update the project configuration under Contacts, Company Name, Authentication - External Providers:
