Add an authentification via Microsoft Azure AD

STEP 1

In your VaultOne, in the section “Administration -> Settings”, select the tab “Identity Providers”.  

To configure your AD inside VaultOne, some information should be given.

Reminder: If you only wish to authenticate users within your AD, you should fill only the first two fields. In case you also want to import AD GROUPS, all fields should be filled and you’ll have to check the box “Do you want to Sync Active Directory Groups?”.

STEP 2

In a new tab, enter the Microsoft Azure portal at https://portal.azure.com, and select the service “Azure Active Directory”.

STEP 3

At the left menu, go to the section “App registrations” and select the option “New Registration”.

STEP 4

Select a name for the App. Then, in “Supported account types”, select the first option, “Accounts in this organizational directory only”. Click “Register”.

STEP 5

It will be generated a new App registration. You should use this data to configure your Azure AD on VaultOne.

STEP 6

Return to your VaultOne and fill according to the data obtained at Azure.

STEP 7

Go to the created App, and this time select the option “Add a Redirect URI”.

STEP 8

In “Platform configurations”, click the button “Add a platform” and then select the option “Single-page application”.

STEP 9

In “Redirect URI’s”, put your subdomain *.vault.one, for instance, https://demo.vault.one. Then, check the options “Access tokens (used for implicit flows)” e “ID Tokens (used for implicit and hybrid flows)”. Click “Configure”.

By applying these settings, it’s possible to login into VaultOne using your Azure ID. To import GROUPS, please follow the steps below.

STEP 10

In the left menu, click “Certificates & Secrets”. In the section “Client secrets”, click “New cliente secret”.

STEP 11

Write a description, and select the option “24 months” for “Expires”. Click “Add”.

STEP 12

Once obtained the new Client secret information, copy the “Value” and fill it on the “Application Key” field at VaultOne.

STEP 13

At the side menu, go to “API permissions”. Then, click “Add a permission”. Roll to the end of the page and select the last option, “Azure Active Directory Graph”.

STEP 14

In “Request API permissions”, select the type “Application permissions”, and then check the option “Directory.Read.All”, in the section “Directory”. Click “Add permissions”.

STEP 15

Still in this section, observe that admin consent weren’t given yet. To grant admin privileges, the user that administrates the AD should click in “Grant admin consente for VaultOne Software”.

STEP 16

Finally, in the section “Overview” of your Azure AD, locate your “Primary domain”, and insert it on the “Directory Domain” at your VaultOne and save it.

Ready. You have successfully configured your Azure Active Directory to your VaultOne.

Did this answer your question? If you need more help, contact us!
help@vaultone.com