In order to authenticate using Microsoft Azure Active Directory (Single Sign On), the configuration must be added within both Visitor Aware, and your Azure Active Directory.


1) Visitor Aware Single Sign-On Setup

  1. Navigate to the Single Sign-on page under System Settings -> Settings -> Single Sign-On
  2. Select "Azure" as the connection type
  3. Click "Create"
  4. Copy the value from the redirect path that was generated and is now shown


2) Azure AD Setup

  1. Navigate to Azure Active Directory -> App registrations.
  2. Create a new application
  3. Choose a name
  4. Select the wanted value for supported account types (it's up to you)
  5. On platform configuration, select "Client Application (Web, iOS, Android, Desktop+Devices)"
  6. Enter the "Redirect Path" value that was generated in step #4 above
  7. Click "Create"
  8. Click on the newly created app.
  9. The "Application ID" is what you will need for your "Client/Application ID" variable.
  10. Click on "Redirect URIs". You will need to whitelist the redirection path for your app here. It will typically be https://domain.com/login/microsoft/callback. Click "Save"
  11. Select the permissions required for your app in the "API permissions" tab.
  12. Click "Save"
  13. In the "Certificates & secrets" tab, click on "new client secret" and enter a description (something like "App Secret"). 
    1. Set Duration to "Never Expires". Click "Save". 
    2. Copy the whole key. This will not show again. You will need this value for the "Client Secret / Access Token" variable.
  14. Go to the active Azure directory and click on the "Enterprise application" link. Then click on the application name
  15. Under the "Properties" tab, enable user sign-in. Make user assignment required. Click "Save".
  16. Under the "Users and groups" tab, add users and their roles as needed.


3) Enter the Azure Information into Visitor Aware


  1. Copy the following values from Azure:
    1. "Application (client) ID"
    2. "Client Secret / Access Token"
  2. Enter the Application ID and Client Secret into your SSO settings page in Visitor Aware
  3. Ensure that the "Enabled" option is set to "Yes"
  4. Click "Save" on your Visitor Aware SSO Configuration screen


4) Test Your Connection


Now that your connection is configured in both Azure, and Visitor Aware, copy the Visitor Aware User Login URL, then log out of Visitor Aware, paste the User Login URL into your URL bar, and you should be signed in successfully!




Interested in setting up auto-provisioning for users? Check out this article:

https://visitoraware.freshdesk.com/support/solutions/articles/43000726585-azure-groups-for-visitor-aware-locations-and-roles