Single Sign On (SSO) - Azure AD

What is Needed

To facilitate setting up SSO via Azure AD (AAD), we need the following information:

Azure Tennant ID.
Azure Application ID (Instructions Below).

Users logging in from the configured company in RIB CX will then be required to login with the AAD credentials.

It matches user accounts based on their email address.

To Get Your Azure Tennant ID

Login to the Azure Portal: Microsoft Azure
Select Microsoft Entra ID (formerly Azure Active Directory)

Example of a Tenant ID (for visual purposes only)

To Get Azure Application ID

To get an Application ID, you will need to register an App.

Login to the Azure Portal: Microsoft Azure
Select Microsoft Entra ID (formerly Azure Active Directory).
Select App Registrations from the menu.
Click on + New Registration.

a. Name: RIB CX SSO

b. Application Type: Native

c. Redirect URI: https://au.itwoCX.com/CXR/Authentication

NOTE: Depending on what instance your project is hosted on you may need to change au.itwocx.com. For example to au2.itwoCX.com or enter the URL that you project is on.

Once above steps are complete your application ID will be displayed under essentials.

Example of Application ID (for visual purposes only)

Edit Manifest File

Edit the manifest file – replyUrls:

"replyUrls": [
    "https://au.itwoCX.com/"
  ],

Edit the manifest file – requiredResourceAccess:

"requiredResourceAccess": [
    {
      "resourceAppId": "00000002-0000-0000-c000-000000000000",
      "resourceAccess": [
        {
          "id": "311a71cc-e848-46a1-bdf8-97ff7156d8e6",
          "type": "Scope"
        },
        {
          "id": "a42657d6-7f20-40e3-b6f0-cee03008a62a",
          "type": "Scope"
        }
      ]
    },
    {
      "resourceAppId": "52e5f8a4-8b0e-455f-9df4-5beb7c37dd18",
      "resourceAccess": [
        {
          "id": "5e626597-eec0-4695-8ddd-e3aa9e05f712",
          "type": "Scope"
        }
      ]
    }
  ],

Provide RIB with the Application ID and Tennant ID so we can update the project configuration under Contacts, Company Name, Authentication - External Providers:

Connecting to API from PowerBi / Excel

Note: if you are authenticating with Azure AD / SSO and connecting to the API from Power BI / Excel etc you also need to make sure that this is allowed in the Application config.

Within the Azure Portal.
Click on App Registrations.
Click on the RIB CX (or iTWO CX) application.
Click on Authentication (Preview).
Click on + Add Redirect URI.
Click on Mobile and Desktop Applications.

Tick the 3 checkboxes.
Click on configure.

They will display in the Mobile and Desktop Applications category:

Click on Settings.
Enable “Allow public client flows”.
Click on Save.

1 What is Needed
2 To Get Your Azure Tennant ID
3 To Get Azure Application ID
4 Edit Manifest File
5 Connecting to API from PowerBi / Excel