Setting Up SSO with Azure AD

Login to Microsoft Azure Portal.
Search for “enterprise applications“ then click the icon found in the “Services“ section.
Click “New Application“.
Click “Create your own application“.
From the panel on the right, provide your new app a name and choose what you are looking to do with the application, in our example we have chosen “Integrate any other application you don't find in the gallery (Non-gallery)“.
Click “Create”.
Search for “azure active directory“ then click the icon found in the “Services“ section.
From the left menu click “App registrations“.
Click the Enterprise App you have created.
Please take note of the Application (client) ID and Directory (tenant) ID as these are what we refer to as your Tenant ID and Client ID later.
From the left menu click “Certificates & secrets“.
Click the “Client secrets“ tab to see a table containing any previous ones you have setup.
Above the table, click the “New client secret“ button.
Provide a description and expiry date, then click “Add“. Please note as client secrets expire you will need to create new ones and provide them to the Mallcomm Team at least 30 days before they expire to allow the Mallcomm Team to schedule an update. We recommend setting the expiry to a minimum of 1 year.
You should now see a new entry in the “Client secrets“ table. Please take note of the value column as this is your Secret and the only time you will have access to it.
Once created please provide the following credentials to the Mallcomm Team to allow them to setup your integration.
1. Tenant ID usually found in the Azure Active Directory service overview.
2. Client ID and Secret for your Enterprise Application.
Once the integration is complete on the Mallcomm server we will provide a Redirect URI. This needs to be implemented in a web platform configuration. To do this, go to the “App registrations“ page detailed in point 8 and click the “Authentication“ link from the left hand side.
Click the “Add a platform“ button and choose “Web“ from the available options.
Enter the Redirect URI provided by Mallcomm and click “Configure“.
This completes your integration with Mallcomm SSO.

Additional Assets

When creating an integration with an active directory like Okta or Azure the Mallcomm Team creates a provisioning provider. This gives a portfolio’s users a custom login screen to the auth service when their email matches an agreed pattern. This requires the following assets and configurations.

Name	Requirements	Where it’s used
Logo	Landscape Recommended 1400 x 500px	At the top of the bespoke Auth Service login screen.
Icon	Square Recommended 960 x 960px	On the buttons towards the bottom of the bespoke Auth Service login screen.
Brand Colour	Hex value	Throughout the bespoke Auth Service login screen.
Email Domain Patterns	A list of domain patterns that enforces a user to sign in with a companies Active Directory e.g. (.*)@toolboxgroup.global.	When redirected to our auth service if a pattern matches you are taken to the bespoke page rather then the standard login.