Azure SSO configuration for the Condeco Device Hub

How to configure Azure SSO for the Device Hub

1. Sign in to Microsoft Azure and select Azure Active Directory from the left menu pane.
2. Select App registrations from the left menu.
   
3. Click New registration and complete the registration details.
   
   1. Name: Enter a name for the app, for example, 'Condeco SSO Manager'.
   2. Supported account types: Select Accounts in this organization only (CONDECO GROUP LIMITED only - Single tenant)
   3. Redirect URI (optional): From the drop-down list select Web and enter https://westeurope.condecoconnect.com/SelfService/ in the text box.
4. Click Register to save the new registration and display the Overview page.
5. From the Overview page, make a note of the Application (Client) ID (A) and Directory (tenant) ID (B) as you will need to share them with Condeco support at the end of this process.
   
6. Select Authentication from the left menu pane and complete the authentication details.
   
   1. Front-channel logout URL: Enter https://westeurope.condecoconnect.com/SelfService/
   2. Implicit grant and hybrid flows: Select Access tokens (used for implicit flows) and ID tokens (used for implicit and hybrid flows).
   3. Supported account types: Select Accounts in this organization only (CONDECO GROUP LIMITED only - Single tenant).
7. Click Save to save the authentication.
8. Select Token configuration from the left menu pane.
   
   1. Click Add to add an optional claim.
   2. Select email from the Claim list.
   3. Click Add to complete the token configuration.

The SSO app registration is now complete. The Application (Client) ID and Directory (tenant) ID must be shared with Condeco support through the agreed method.