OAuth 2.0 Azure

Before You Begin

1. Log into your institution's Azure Portal as a system administrator

2. On the left hand menu, click Azure Active Directory

3. On the Azure AD sub menu, click App registrations

4. Click New registration

1. Enter a name for the new app (we recommend AppsAnywhere)

2. Enter the address of your AppsAnywhere site, including the /sso/oauth2/your-custom-url path in the Redirect URI box.  Leave the type as Web.

3. Click Register

Ensure that the your-custom-url portion of the Sign-on URL matches the "URL Identifier" you are using/planning on using for the OAuth 2.0 method within AppsAnywhere.

You should only be setting up Azure AD SSO with a production environment, so be sure to use your secure, certified, load balanced address for the Sign-on URL.

Note: Single tenant vs. Multitenant

If Single tenant is selected you MUST also enter the correct tenant ID in the ‘Tenent’ field when configurating the oAuth 2.0 connection on AppsAnywhere.

If Multitenant is selected you MUST NOT enter a value in the ‘Tenent’ field when configurating the oAuth 2.0 connection on AppsAnywhere.

1. Make a note of the Application ID displayed in the main pane

2. On the right-hand menu, click Certificates & Secrets

Another pane will then open where you can create a Secret that AppsAnywhere will use to authenticate with Azure.

1. To create a new Secret, click New client secret.

2. Type appsanywhere into the Description field.

3. Change the Expires value to Never

4. Click Add

5. Make a note of the Value displayed. This will not be available once you leave this screen.
   

Optional configuration

While not required, it is recommended to also include the upn claim as part of the ID token configuration. This can be configured via the following process:

1. On the left-hand menu, click Token configuration

2. Ensure the upn claim is not already included in the list of Optional claims

3. To add a new claim, click Add optional claim

4. On the right-hand menu that appears, select ID for the Token type

5. From the list of claims that is then displayed, find the upn claim and click the box next to it

6. Once done, click Add

You may be warned that the upn claim requires additional permissions to be configured before it will add the claim; this is perfectly safe to do, though you can read more information about this here: Provide optional claims to your app.

1. Log into your institution's Azure Portal as a system administrator

2. On the left hand menu, click Azure Active Directory

3. On the Azure AD sub menu, click App registrations

4. Click New registration

1. Enter a name for the new app (we recommend AppsAnywhere)

2. Enter the address of your AppsAnywhere site, including the /sso/oauth2/your-custom-url path in the Redirect URI box.  Leave the type as Web.

3. Click Register

You should only be setting up Azure AD SSO with a production environment, so be sure to use your secure, certified, load balanced address for the Sign-on URL

You will then be directed back to the App registrations screen where you should now see your app in the list.

1. Make a note of the Application ID displayed in the main pane

2. On the right-hand menu, click Certificates & Secrets

Another pane will then open where you can create a key that AppsAnywhere will use to authenticate with Azure.

1. To create a new Secret, click New client secret.

2. Type appsanywhere into the Description field.

3. Change the Expires value to Never

4. Click Add

5. Make a note of the Value displayed. This will not be available once you leave this screen.

1. Log into your Office 365 Admin interface as an administrator

2. On the left-hand menu go to Settings > Organization profile

3. Look for the (possibly 4th) section on the page titled Add customer tiles for your organization

4. Click Edit

A dialog box will open where any existing custom tiles are listed and you will have the ability to add a new tile.

1. Click Add a custom tile

You will now see a dialog that allows you to set up your new tile. Enter the information required as follows:

1. Enter AppsAnywhere as your Tile name

2. Enter the production-ready, secure, certificated, load-balanced URL of your AppsAnywhere portal in the URL box

3. Give the tile a Description that your users will see when they hover over the tile

4. Enter the public URL of an image you wish to use for the tile for the Image URL. 

5. Click Save