OpenID Connect SSO with Azure Active Directory

[emma.waite.1 (Emma Waite)]

1. Sign in to your Azure Active Directory
2. Select App Registrations from the Application menu
   
   
3. Click New Registration
4. Provide a name for the application and click register
5. Click on Endpoints
   
   
6. Copy the beginning part of one of the URLs (see screenshot for example)
   
   
7. Navigate back to Infosec IQ
8. Click the settings gear in the top-right corner and select User Settings
9. Select Organizations then Setup under Single sign-on
10. Select OpenID Connect and paste the URL you copied above in the Provider URL Section
11. Navigate back to the application in Azure and click on Certificates & Secrets
12. Click New Client Secret
13. Provide a name and specify how long you want the token to be active for and click save
14. Copy the key under value
15. Navigate back to Infosec IQ and paste the token in the Client Secret section
16. Click Save
    
    
17. Copy the Redirect URL from the SSO settings and navigate back to Azure
    
    
18. Once in Azure, Click on Authentication under Manage
19. Select Add a Platform
20. Click on Web
21. Paste the Redirect URL in the Redirect URI box
22. Check the box next to ID Tokens
23. Click Configure
    
    
24. Once configured, navigate back to Infosec Accounts and click on edit.
25. Toggle the Activate this config option and click save
    
26. expand the actions dropdown menu and select test.
27. Click Begin on the test
28. Once successful, navigate back to the SSO set up screen and expand the action dropdown menu and click edit.
29. (optional) If you want SSO required for all users, navigate to the security tab to enable that setting