Articles in this section

Configure SSO with Microsoft Azure

Tom Santiago
Updated

If you do not already have a Microsoft Azure account, create a free Azure Account , using the same email address prefix you use to sign in to integrator.io. For example, if you sign in to integrator.io with the email address: celigo-labs@celigo.com your Azure email address should be: celigo-labs@celigolabs.onmicrosoft.com.

Important

Do not allow any user of the Celigo platform to use the Microsoft User Principal Name (UPN) as the email address they use to sign in. Attempting to use a UPN for SSO authentication will result in an error.

Use the following steps to configure Azure as your SSO provider for integrator.io.

Create a Microsoft Entra ID tenant

Once you have created your Azure account with the same email address you use to sign in to integrator.io, use the following steps to create a Microsoft Entra ID

tenant:

  1. Log in to the Azure portal, and select Create a resource from the homepage.

    A1.png

  2. In the left navigation menu, select Identity, and then search for and select Microsoft Entra ID.

    A2.png

  3. Click Create on the Microsoft Entra ID service.

  4. Enter your Organization name, Initial domain name, and your Country or region, then click Create (at the bottom of the page).

    A3.png

  5. After a few moments, the page displays a link to manage your tenant. Click the link to access the Overview page.

    A4.png

  6. This page confirms your tenant was successfully created.

    A5.png

Add user to newly created tenant

  1. Navigate to the tenent page and in the left navigation menu, click User flows under Policies.

    userFlows.png

  2. In the Select a user flow type section, click Sign in.

    userFlowSignIn.png

  3. .Enter a name in the B2C_1_ field, and in the Local accounts section, click Email signin.

    localAccounts.png

  4. In the Application claims section, check the following Return claim items:

    • City

    • Country/Region

    • Display Name

    • Email Addresses

    • Given Name

    • Identity Provider Access Token

    • Surname

    • User's Object ID

  5. Save the user flow.

Register an application

  1. Click App registrations in the left navigation menu under Manage.

  2. Click + New registration.

    A9.png

  3. Enter an application name and the callback URL in the Redirect URI field in the form and click Register.

    A10.png

  4. Copy the Application client ID to use as the Client ID for your integrator.io iClient.

    ApplicationClientId.png

  5. Click Add a certificate or secret.

    AddACertOrSecret.png

  6. Click + New client secret, enter the name, and click Add.

    4402555102093-AddClientSecret.png

  7. Save the value in the Value field of the created Client to enter into integrator.io as the Client Secret for your integrator.io iClient.

    clientSecrets.png

  8. Select the Authentication tab, and in the Web section under Redirect URIs, click Add URI to add the redirect URL.

    redirectUris.png

  9. In the Implicit grant and hybrid flows section, check Access tokens (used for implicit flows) and ID tokens (used for implicit and hybrid flows in the Authentication page).

  10. Click Save.

  11. Select the Overview tab, and click Endpoints in the application to retrieve the Issuer URL.

    Endpoints.png

  12. Copy the OpenID Connect metadata document endpoint URL (including /v2.0) to enter as the Issuer URL in integrator.io. For example:http://login.microsoftonline.com/<yourTenantId>/v2.0

    Note

    Only copy the URL to /v2.0 . Do not copy the entire URL or any part of the URL beyond /v2.0 .

    enpointURL.png

  13. Navigate to Home, and click Branding & properties in the left navigation menu.

    BrandingAndProperties.png

  14. Find the Home page URL field and enter: https://integrator.io/sso/<your-organization-ID>. This URL should be identical to the Application login URL in integrator.io. Use the following steps to find your Application login URL in integrator.io:

    1. Log in to integrator.io using account owner credentials.

    2. Click the avatar icon in the upper right corner of integrator.io, then click Security.

    3. The Security tab opens.

    enableSSOAppLoginURL.png

  15. Save your settings and sign in to your integrator.io environment using the Application login URL. You may be prompted to allow access on first log in depending on your configuration.

See Enable single sign-on (SSO) for instructions for configuring SSO for integrator.io.