Skip to main content
Logo
There is a newer version of Contensis. Click to find out more and download the latest version.

Register Contensis with Azure AD

This article outlines the process of registering Contensis with Azure AD to provide a single sign-on service.

Add new application to Azure AD

  1. Login to the Azure portal  https://portal.azure.com and select Azure Active Directory from the left hand menu.

1 - Azure Dashboard

  1. Select App registrations from the secondary menu.

2 - Select App registrations

  1. Select New application registration from the top toolbar.

3- New app registration

  1. Enter a name for your application, this can be anything you want. Leave the application type as Web app /API and then enter your sign-on URL. The format of the sign-on URL is your CMS address with the addition of /authenticate/, so in this example it is https://cms.cloud.contensis.com/authenticate/. Once you have entered all the details click Create.

4- Enter App details

  1. Now you have created the App, you must set the App ID URI, to do this click the properties button and enter the App ID URI. The format of the App ID URI is your CMS address with the addition of /authenticate/, so in this example it is https://cms.cloud.contensis.com/authenticate/. Next click Save.

4a-Set App ID URI

Update the application manifest

  1. You now need to edit the manifest file. Select your application from the list.

5- Select App

And click the Manifest option.

6- Edit Manifest

  1. Find the "groupMembershipClaims" setting in the manifest file and change the value to "SecurityGroup". Then click save.

7 - Update Manifest value

Grant application permissions

  1. Navigate back to your application and click All settings and then select Required permissions from the secondary menu.

8 - Edit Settings

  1. Select the Windows Azure Active Directory API.

9 - Select Windows Azure AD

  1. Ensure the following permissions are selected and then click Save.

10 - Set permissions

  1. Select Grant Permissions from the top toolbar.

11 - Grant permissions

  1. Click Yes to grant the permissions for all accounts in the current directory.

12 - Grant permissions confirmation