Basic Azure AD Config

Tips and tricks
1

Basic step-by-step tutorial for OAuth2 config with Azure AD

Prerequisites:

  • Simplicité instance with designer access
  • A test account in your Azure organization to test the login

1) New app registration

1-new_reg
1-new_reg3008×1518 379 KB

2) Register

2-reg
2-reg1786×1600 254 KB

3) Locate some of the endpoint data

3-endpoints
3-endpoints1971×800 202 KB

NB: depending on the “supported account types” selected on step 2, your authorization and token URLs might or might not contain the tenant ID

4) Generate and save secret

Warning: The secret value only shows once, make sure to copy it

4-secret
4-secret1967×777 137 KB

5) Authorize user on your app (add claims)

5-claims-2
5-claims-21964×846 112 KB

6) Add Azure as an Authentication Provider through the AUTH_PROVIDERS System Parameter

Customize with the values from precedent steps (blue question marks)

[
    { "name": "simplicite", "type": "internal", "visible": true },
    { 
        "name": "azuread", 
        "type": "oauth2", 
        "label": "Sign in with AzureAD (OAuth2)", 
        "client_id": "<REPLACE_CLIENT_ID>", 
        "client_secret": "<REPLACE_CLIENT_SECRET>",
        "authorize_url": "<REPLACE_AUTHORIZE_URL>",
        "token_url": "<REPLACE_AUTHORIZE_URL>",
        "logout_url": "https://login.microsoftonline.com/common/oauth2/v2.0/logout",
        "userinfo_url": "https://graph.microsoft.com/oidc/userinfo",
        "userinfo_mappings": {
            "login": "email"
        },
        "sync": true,
        "visible": true
    }
]

Simplicité®
Simplicité®2966×1418 383 KB

7) Implement some group attribution

PS: This step needs customization to fit to your own scenario

package com.simplicite.commons.Application;

import java.util.*;
import com.simplicite.util.*;
import com.simplicite.util.tools.*;

/**
 * Platform Hooks
 */
public class PlatformHooks extends com.simplicite.util.engine.PlatformHooksInterface {
	@Override
	public void preLoadGrant(Grant g) {
		if("azuread".equals(g.getSessionInfo().getProvider())){
			String userId = Grant.getUserId(g.getLogin());
			Grant.removeAllResponsibilities(userId);
			Grant.addResponsibility(userId, "DEMO_ADMIN");
			AppLog.info("Detected AzureAD login : " + g.getLogin() + " (" + userId + "). Forcing responsabilities.", null);
		}
	}
}
4 Likes