Page History

Overview

Single sign-in using Microsoft Azure Active Directory allows your Website Users to authenticate and sign in with their Microsoft credentials. Access can be restricted, forced or granted by email address domain name.

On the login page/popup, along with

the userid/password method, sign in with Microsoft is

available. If the user selects this, your site's settings will determine whether they can login. Unless restricted, the user can access their basic profile data. If

they are already signed into their Microsoft account at this time, they will be logged in without having to approve it,  

Image Modified 

Step-by-step guide

This guides you through the configurations for Microsoft Azure Sign-In for your site.

Before you begin: you have access to the Application (Client) ID and Directory (Tenant) ID, if applicable

and these have not been entered.  

Configure Microsoft Sign-in in the CMS 

1. In the CMS,

1. go to Settings → Settings → Feature Management → User. 
   

1. 
   
2. Click Configure.
   Image Modified

1. 
   
   

2. Scroll down to the Microsoft section. 
   Image Modified
   
   
   

3. To enable this feature on your site, toggle ON Enabled. 
   
   

4. In Application (Client) ID, enter the application ID key, if it

1. 's not already there. 
   
   

2. In Directory (Tenant) ID -For Single Tenant Use Only, enter the key if your application is for 'Single Tenant' (single directory), otherwise leave empty.  
   
   

3. The Invalid User Message appears when the Microsoft User account cannot be linked to a registered User.

1. If needed, change the message

1. to suit. 
   Image Modified
   
   

2. The Declined Consent Message appears if the User cancels the authentication process before completing the sign in. They will be returned to the login page.

1. If needed, change the message

1. to suit.
   Image Modified
   
   
   

2. To specify domain-based rules, toggle ON Enable Domain Restrictions.
   
   
3. To force users from specific domains to use Microsoft Sign In, enter each domain, then press Enter or Tab.
   Image Modified
   
   
4. To allow only certain domains to use Microsoft sign in, in Allowed Microsoft Sign In Domains, enter each domain, then press Enter or Tab.
   
   
5. In Microsoft Sign In Not Allowed Message, edit the message displayed to the user when they are not permitted to use Microsoft Sign In.
   
   
6. In Username/password Login Not Allowed Message, edit the message displayed to the user when they must use Microsoft Sign In.
   
   

7. To save your settings, click Save or Save & Exit.

8. Reset the dictionary to ensure changes are made live. 
   
   
9. IMPORTANT - If using Microsoft Start App, restart the application.
   
   
10. Check Microsoft sign-in is now available on your website

1. .

Related Resources