meta data for this page
  •  

Differences

This shows you the differences between two versions of the page.

Link to this comparison view

Next revision		Previous revision
aad_sso [2023/04/29 07:24] – created wrongechoaad_sso [2025/03/28 06:48] (current) – /portal > /client wrongecho
Line 1: Line 1:
 ====== Client Portal - Azure AD SSO ====== ====== Client Portal - Azure AD SSO ======
  
-If any of your clients use Azure AD as an IdP, you can utilize this for authentication to the ITFlow portal. This means one less password for users to remember!+If any of your clients use Azure AD (Entra ID) as an IdP, you can utilize this for authentication to the ITFlow portal. This means one less password for users to remember!
  
 ==== Create an App Registration in Azure ==== ==== Create an App Registration in Azure ====
Line 11: Line 11:
     - Name: **ITFlow SSO**     - Name: **ITFlow SSO**
     - Supported Account Types: **Accounts in any organization directory (multi tenant)**     - Supported Account Types: **Accounts in any organization directory (multi tenant)**
-    - Redirect URL: **https://itflow.yourdomain.com/portal/login_microsoft.php**+    - Redirect URL: **https://itflow.yourdomain.com/client/login_microsoft.php**
   - Select **Register**   - Select **Register**
   - On the new app registration, select the **Authentication** blade   - On the new app registration, select the **Authentication** blade
Line 34: Line 34:
     - **Email: needs to match** a valid **Azure** account     - **Email: needs to match** a valid **Azure** account
     - Portal > Login: **Azure**     - Portal > Login: **Azure**
-  - Navigate to /portal on your ITFlow instance and select **Login with Microsoft Azure AD**+  - Navigate to /client on your ITFlow instance and select **Login with Microsoft Azure AD**
 {{::aad_sso_portal_sucess.png?250|}} {{::aad_sso_portal_sucess.png?250|}}
  
 ==== Notes ==== ==== Notes ====
-  * You may need to accept/approve the app registration using an admin account registered in each client portal+  * You may need to accept/approve the app registration on behalf of the org using an admin account registered in each client portal 
 +  * SSO cannot be used for Agent/Technician authentication
  
 {{:aad_sso_perms.png?300|}} {{:aad_sso_perms.png?300|}}