SSO/Office365: Difference between revisions
Jump to navigation
Jump to search
No edit summary |
No edit summary |
||
Line 16: | Line 16: | ||
*Click edit under '''Basic SAML Configuration''' | *Click edit under '''Basic SAML Configuration''' | ||
*Delete all info under '''Identifier (Entity ID)''' | *Delete all info under '''Identifier (Entity ID)''' | ||
*Open UMS '''Configurator''' program | *Open SQL Management Studio on the UMS Server and connect to the database | ||
** Run this SQL Command | |||
*** Update UMSWebGeneralSettings Set SetSSO = 1 | |||
* Login to UMS web | |||
** You will be redirected to SSO setup | |||
** | |||
* Open UMS '''Configurator''' program | |||
**Click '''Web Setup''' | **Click '''Web Setup''' | ||
**Select '''General settings''' | **Select '''General settings''' | ||
***Select '''Azure AD''' in the '''Check login against''' drop down list | ***Select '''Azure AD''' in the '''Check login against''' drop down list | ||
* | * | ||
* | |||
* | |||
<br /> | <br /> |
Revision as of 09:49, 20 May 2021
How to use Office 365 as login provider instead of Active Directory
You need to create an Enterprise application
Login into portal.azure.com
- Click New application
- Click Create your own application
- Enter a name
- Choose Integrate any other application you don't find in the gallery (Non-gallery)
- Click Create (This will also create an App registration)
- Find Properties for the Enterprise application you just created
- Set User assignment required? and Visible to users? to false
- Click Save
- Click Single sign-on
- Click SAML
- Click edit under Basic SAML Configuration
- Delete all info under Identifier (Entity ID)
- Open SQL Management Studio on the UMS Server and connect to the database
- Run this SQL Command
- Update UMSWebGeneralSettings Set SetSSO = 1
- Run this SQL Command
- Login to UMS web
- You will be redirected to SSO setup
- Open UMS Configurator program
- Click Web Setup
- Select General settings
- Select Azure AD in the Check login against drop down list
Reset password for others
- Go to Azure Active Directory
- Click Roles and administrators
- Find Password administrator
- Click Add assignments
- Find the name of the Enterprise application you created earlier
- Select it and click Add