In this Article

Other Content

Configuring Single Sign-On (SSO) - Azure Active Directory (AAD)

This article describes the steps required to configure Single Sign-On (SSO), using Azure Active Directory (AAD) as the identity provider (IdP).

Enabling SSO with Azure AD involves:

  • Creating an Azure AD App Registration
  • Enabling SSO in Buttonwood Central

Note: With SSO configured, users are still prompted to set a local password when activating their account in Buttonwood Central. This password is used if organisation administrators turn off SSO for a domain.

Configuring Azure AD

Prerequisites

  • Administrative access to the Azure Portal

Configuration Steps

  1. Log in to the Azure Portal
    https://portal.azure.com
  2. Navigate to All Services > Identity > App registrations
  3. Click New registration
  4. In the Register and application blade, enter the following information:
    • Name: A name for the application
    • Supported account types: Select Accounts in this organizational directory only
    • Redirect URI: Select Web and enter https://adfs.bcx.buttonwood.net/adfs/ls
      mceclip1.png
  5. Click Register
  6. A notification displays when the application has been created
    mceclip2.png
  7. From the app registration Overview blade, click Add an Application ID URI
    mceclip3.png
    Alternatively, navigate to Manage > Expose and API
    mceclip4.png
  8. From the Expose an API screen, click Set next to Application ID URI
    mceclip5.png
  9. On the Set the App ID URI prompt, replace the default value with 
    http://adfs.bcx.buttonwood.net/adfs/services/trust
    mceclip0.png
  10. Click Save
  11. A notification displays when the application has successfully saved
    mceclip7.png

Configuring Buttonwood Central

Prerequisites

Procedure Steps

  1. Login to the Buttonwood Central
  2. Navigate to Manage > Custom Domains
    mceclip0.png
  3. For the domain to be enabled, click Enable SSO
    Note:     This option does not appear unless the domain has been verified
    Note: Organisation administrators can add multiple custom domains but only enable SSO for a subset of domains
    mceclip7.png
  4. On the Choose a SSO Provider screen, select the following:
    • SSO Provider: Azure Active Directory
      mceclip6.png
  5. Click Enable SSO
  6. A message indicates the status of the request
    mceclip7.png
  7. The SSO Status for the domain changes to Provisioning and may take a few minutes to process before changing to Enabled