SSO/Office365 - Revision history

Khm@inlogic.dk at 09:22, 31 October 2025

2025-10-31T09:22:30Z

← Older revision		Revision as of 09:22, 31 October 2025
Line 40:		Line 40:
	**Choose the name in the drop down and click '''Edit'''		**Choose the name in the drop down and click '''Edit'''
	**Click '''Add''' under the section '''Create new Single Sign On'''		**Click '''Add''' under the section '''Create new Single Sign On'''
	***Choose '''Azure AD''' in the '''Type''' drop down		***Choose '''Azure AD''' in the '''Type''' drop down
	***In the boxes '''Name''', '''SingleSignOnServiceUrl''' ~~and~~ '''SingleLogoutServiceUrl''' replace '''{TenantID}''' with the application id of your Enterprise application		***in the boxes
	***The '''LocalCertificateFile''' must be entered with a PFX certificate. This file must be placed in the root directory of your UMS Academic installation (Normally C:\inetpub\wwwroot) - THIS MUST '''NOT''' BE THE WEB COMMUNICATION CERTIFICATE, please use a different certificate.		****'''Name'''
	**** '''see [https://wiki.inlogic.dk/index.php/SSO_UMS#Open_AD_FS_Management_on_the_primary_ADFS_Server. SSO UMS] for more information about creating certificates and UMS SSO configuration (This is needed to create the selfsigned certificate)'''		****'''SingleSignOnServiceUrl'''
	***The '''LocalCertificatePassword''' must be entered to be able to read the PFX certificate		****'''SingleLogoutServiceUrl'''
	***The '''PartnerCertificateFile''' is a certificate the is generated during Azure SSO setup (The file downloaded from '''Certificate (Raw)'''). Remember to include the filename extension		***replace '''{TenantID}''' with the application id of your Enterprise application
	****This file must be placed in the root directory of your UMS Academic installation (Normally C:\inetpub\wwwroot)		**The '''LocalCertificateFile''' must be entered with a PFX certificate. This file must be placed in the root directory of your UMS Academic installation (Normally C:\inetpub\wwwroot) - THIS MUST '''NOT''' BE THE WEB COMMUNICATION CERTIFICATE, please use a different certificate.
	***Click '''Save'''		*** '''see [https://wiki.inlogic.dk/index.php/SSO_UMS#Open_AD_FS_Management_on_the_primary_ADFS_Server. SSO UMS] for more information about creating certificates and UMS SSO configuration (This is needed to create the selfsigned certificate)'''
			****The '''LocalCertificatePassword''' must be entered to be able to read the PFX certificate
			****The '''PartnerCertificateFile''' is a certificate the is generated during Azure SSO setup (The file downloaded from '''Certificate (Raw)'''). Remember to include the filename extension
			*****This file must be placed in the root directory of your UMS Academic installation (Normally C:\inetpub\wwwroot)
			****Click '''Save'''
	**Click '''Enable'''		**Click '''Enable'''
	**Click '''Save'''		**Click '''Save'''

Kia@inlogic.dk at 08:40, 24 June 2025

2025-06-24T08:40:18Z

← Older revision		Revision as of 08:40, 24 June 2025
Line 26:		Line 26:
	***Enter this in '''Reply URL (Assertion Consumer Service URL)'''		***Enter this in '''Reply URL (Assertion Consumer Service URL)'''
	****'''<nowiki>https://{URL}/SSO/AssertionConsumerServiceAzureAd.aspx</nowiki>'''		****'''<nowiki>https://{URL}/SSO/AssertionConsumerServiceAzureAd.aspx</nowiki>'''
			**Under '''Attributes & Claims'''
			***Only keep "'''Unique User Identifier'''" with the value "'''user.localuserprincipalname'''"
	**Under '''SAML Signing Certificate'''		**Under '''SAML Signing Certificate'''
	***Click download for '''Certificate (RAW)'''		***Click download for '''Certificate (RAW)'''
	***This file must be placed in the root directory of your UMS Academic installation (Normally C:\inetpub\wwwroot)		***This file must be placed in the root directory of your UMS Academic installation (Normally C:\inetpub\wwwroot)
	*Find '''Azure Active Directory'''
	*Find '''App registrations'''
	*Find your application that was created as an '''Enterprise applications'''
	**Click '''API permissions'''
	**Click '''Add a permission'''
	***Click '''Microsoft Graph'''
	****Click A'''pplication permissions'''
	*****Add these permissions
	******User.ReadBasic.All
	******UserAuthenticationMethod.Read.All
	**Click '''Grant admin consent for {Tenant}'''
	***Click '''Yes'''
	*Open '''SQL Management Studio''' connect to the database		*Open '''SQL Management Studio''' connect to the database
	**Run this SQL Command		**Run this SQL Command
Line 95:		Line 85:
	==FAQ :==		==FAQ :==
	If you get this message when trying to connect it might be a matter of waiting for Client tenant distribution		If you get this message when trying to connect it might be a matter of waiting for Client tenant distribution
	[[File:~~SSO login error message~~.png\|~~thumb~~\|~~none~~]]		[[File:SSO_login_error_message.png\|none\|frame]]

	=== Cross-origin token redemption is permitted only for the 'Single-Page Application' ===		=== Cross-origin token redemption is permitted only for the 'Single-Page Application' ===
	If this error occurs, this is most likely the authentication settings on the UMS App registration. Web should be filled out with localhost as the image below displays and the Single-page application should be your UMS Web URL.		If this error occurs, this is most likely the authentication settings on the UMS App registration. Web should be filled out with localhost as the image below displays and the Single-page application should be your UMS Web URL.

	In most cases this would be something like <nowiki>https://ums.enterschoolnamehere.dk</nowiki>.[[File:Azure_App_Registration_Authentication.png\|none\|~~thumb\|700x700px~~]]		In most cases this would be something like <nowiki>https://ums.enterschoolnamehere.dk</nowiki>.[[File:Azure_App_Registration_Authentication.png\|none\|frame]]

Kia@inlogic.dk at 07:16, 24 June 2025

2025-06-24T07:16:31Z

← Older revision		Revision as of 07:16, 24 June 2025
Line 37:		Line 37:
	****Click A'''pplication permissions'''		****Click A'''pplication permissions'''
	*****Add these permissions		*****Add these permissions
	******User.~~ReadWrite~~.All		******User.ReadBasic.All
	******UserAuthenticationMethod.~~ReadWrite~~.All		******UserAuthenticationMethod.Read.All
	**Click '''Grant admin consent for {Tenant}'''		**Click '''Grant admin consent for {Tenant}'''
	***Click '''Yes'''		***Click '''Yes'''

Cna@inlogic.dk: /* Reset password for others */

2025-05-06T09:41:53Z

Reset password for others

← Older revision		Revision as of 09:41, 6 May 2025
Line 82:		Line 82:
	*Find '''Password administrator'''		*Find '''Password administrator'''
	*Click '''Add assignments'''		*Click '''Add assignments'''
	*Find the name of the ~~Enterprise application you created earlier~~		*Find the name or ObjectID of the APP Registration entered into your Office365 tenant settings.
	*Select it and click '''Add'''		*Select it and click '''Add'''

Kia@inlogic.dk: /* Change own password */

2025-01-09T10:34:08Z

Change own password

← Older revision		Revision as of 10:34, 9 January 2025
Line 85:		Line 85:
	*Select it and click '''Add'''		*Select it and click '''Add'''

	=== Change own password ===		=== Change own password VIA UMS Website ===
	See also [[Password Change Azure AD]]<br />		See also [[Password Change Azure AD]]<br />

Kia@inlogic.dk: /* Change password */

2025-01-09T10:33:53Z

Change password

← Older revision		Revision as of 10:33, 9 January 2025
Line 85:		Line 85:
	*Select it and click '''Add'''		*Select it and click '''Add'''

	=== Change password ===		=== Change own password ===
	See also [[Password Change Azure AD]]<br />		See also [[Password Change Azure AD]]<br />

Khm@inlogic.dk: /* Before doing anything her - see SSO UMS for more information about creating certificates and UMS SSO configuration */

2025-01-06T13:25:51Z

Before doing anything her - see SSO UMS for more information about creating certificates and UMS SSO configuration

← Older revision		Revision as of 13:25, 6 January 2025
Line 45:		Line 45:
	***Update UMSWebGeneralSettings Set SetSSO = 1		***Update UMSWebGeneralSettings Set SetSSO = 1
	*Open UMS		*Open UMS

	=== '''Before doing anything her - see [https://wiki.inlogic.dk/index.php/SSO_UMS#Open_AD_FS_Management_on_the_primary_ADFS_Server. SSO UMS] for more information about creating certificates and UMS SSO configuration''' ===

	*You will be redirected to SSO setup		*You will be redirected to SSO setup
Line 55:		Line 53:
	***In the boxes '''Name''', '''SingleSignOnServiceUrl''' and '''SingleLogoutServiceUrl''' replace '''{TenantID}''' with the application id of your Enterprise application		***In the boxes '''Name''', '''SingleSignOnServiceUrl''' and '''SingleLogoutServiceUrl''' replace '''{TenantID}''' with the application id of your Enterprise application
	***The '''LocalCertificateFile''' must be entered with a PFX certificate. This file must be placed in the root directory of your UMS Academic installation (Normally C:\inetpub\wwwroot) - THIS MUST '''NOT''' BE THE WEB COMMUNICATION CERTIFICATE, please use a different certificate.		***The '''LocalCertificateFile''' must be entered with a PFX certificate. This file must be placed in the root directory of your UMS Academic installation (Normally C:\inetpub\wwwroot) - THIS MUST '''NOT''' BE THE WEB COMMUNICATION CERTIFICATE, please use a different certificate.
			**** '''see [https://wiki.inlogic.dk/index.php/SSO_UMS#Open_AD_FS_Management_on_the_primary_ADFS_Server. SSO UMS] for more information about creating certificates and UMS SSO configuration (This is needed to create the selfsigned certificate)'''
	***The '''LocalCertificatePassword''' must be entered to be able to read the PFX certificate		***The '''LocalCertificatePassword''' must be entered to be able to read the PFX certificate
	***The '''PartnerCertificateFile''' is a certificate the is generated during Azure SSO setup (The file downloaded from '''Certificate (Raw)'''). Remember to include the filename extension		***The '''PartnerCertificateFile''' is a certificate the is generated during Azure SSO setup (The file downloaded from '''Certificate (Raw)'''). Remember to include the filename extension

Khm@inlogic.dk at 13:24, 6 January 2025

2025-01-06T13:24:47Z

← Older revision		Revision as of 13:24, 6 January 2025
Line 46:		Line 46:
	*Open UMS		*Open UMS

	=== '''Before doing anything her - see [[SSO UMS]] for more information about creating certificates and UMS SSO configuration''' ===		=== '''Before doing anything her - see [https://wiki.inlogic.dk/index.php/SSO_UMS#Open_AD_FS_Management_on_the_primary_ADFS_Server. SSO UMS] for more information about creating certificates and UMS SSO configuration''' ===

	*You will be redirected to SSO setup		*You will be redirected to SSO setup

Khm@inlogic.dk at 13:42, 7 November 2024

2024-11-07T13:42:18Z

← Older revision		Revision as of 13:42, 7 November 2024
Line 44:		Line 44:
	**Run this SQL Command		**Run this SQL Command
	***Update UMSWebGeneralSettings Set SetSSO = 1		***Update UMSWebGeneralSettings Set SetSSO = 1
	*Open UMS ~~web~~		*Open UMS
	**You will be redirected to SSO setup
	***Click '''Add,''' enter a name and click '''Create'''		=== '''Before doing anything her - see [[SSO UMS]] for more information about creating certificates and UMS SSO configuration''' ===
	***Choose the name in the drop down and click '''Edit'''
	***Click '''Add''' under the section '''Create new Single Sign On'''		*You will be redirected to SSO setup
	****Choose '''Azure AD''' in the '''Type''' drop down		**Click '''Add,''' enter a name and click '''Create'''
	****In the boxes '''Name''', '''SingleSignOnServiceUrl''' and '''SingleLogoutServiceUrl''' replace '''{TenantID}''' with the application id of your Enterprise application		**Choose the name in the drop down and click '''Edit'''
	****The '''LocalCertificateFile''' must be entered with a PFX certificate. This file must be placed in the root directory of your UMS Academic installation (Normally C:\inetpub\wwwroot)		**Click '''Add''' under the section '''Create new Single Sign On'''
	****The '''LocalCertificatePassword''' must be entered to be able to read the PFX certificate		***Choose '''Azure AD''' in the '''Type''' drop down
	****The '''PartnerCertificateFile''' is a certificate the is generated during Azure SSO setup (The file downloaded from '''Certificate (Raw)'''). Remember to include the filename extension		***In the boxes '''Name''', '''SingleSignOnServiceUrl''' and '''SingleLogoutServiceUrl''' replace '''{TenantID}''' with the application id of your Enterprise application
	*****This file must be placed in the root directory of your UMS Academic installation (Normally C:\inetpub\wwwroot)		***The '''LocalCertificateFile''' must be entered with a PFX certificate. This file must be placed in the root directory of your UMS Academic installation (Normally C:\inetpub\wwwroot) - THIS MUST '''NOT''' BE THE WEB COMMUNICATION CERTIFICATE, please use a different certificate.
	****Click '''Save'''		***The '''LocalCertificatePassword''' must be entered to be able to read the PFX certificate
	***Click '''Enable'''		***The '''PartnerCertificateFile''' is a certificate the is generated during Azure SSO setup (The file downloaded from '''Certificate (Raw)'''). Remember to include the filename extension
			****This file must be placed in the root directory of your UMS Academic installation (Normally C:\inetpub\wwwroot)
	***Click '''Save'''		***Click '''Save'''
	***Click '''Add to website'''		**Click '''Enable'''
	***Choose website setting and click '''Add'''		**Click '''Save'''
	**		**Click '''Add to website'''
			**Choose website setting and click '''Add'''
			*

	*Open UMS '''Configurator''' program		*Open UMS '''Configurator''' program
	**Click '''Web Setup'''		**Click '''Web Setup'''
Line 70:		Line 74:
	*Restart IIS		*Restart IIS
	*The changes above may take some time to be distributed into Client Tenant system		*The changes above may take some time to be distributed into Client Tenant system
	*
	*

	<br />		<br />

Cna: /* UMS Graph API connection in Office365 Tenant settings */

2023-10-25T12:14:41Z

UMS Graph API connection in Office365 Tenant settings

← Older revision		Revision as of 12:14, 25 October 2023
Line 87:		Line 87:
	See also [[Password Change Azure AD]]<br />		See also [[Password Change Azure AD]]<br />

	=== ~~UMS Graph API connection~~ in ~~Office365 Tenant settings~~ ===		=== Notice when using "Check Login in Azure AD" in Web Setup ===
	~~When creating~~ the Office365 ~~tenant~~ settings~~, just add the client_id~~ and ~~clientsecret from the SSO APP registration~~ settings ~~created above~~.		In order to work the user-domain needs to be configured in both Office365 Tenant-settings and User-settings.

	‎		‎