Enabling SSO - Add Consent to AppXite Auth0 App in Azure

Introduction

This article explains the essential steps required to configure authentication for accessing the AppXite platform via Azure Active Directory (AAD) login. The process begins with whitelisting the domain of the accessing email and then adding the necessary consent for the Auth0 application in Azure.

In this article:

• Prerequisite: Domain Whitelisting
• Adding Admin Consent
• Manual Application Creation
• Limitations

Prerequisite: Domain Whitelisting

As the first step, it is a requirement to whitelist the domain of email that will access AppXite platform with AAD login method. You can find more information on this topic HERE.

Adding Admin Consent

The Global Administrator for the Azure tenant must perform the following steps:

1. Log in into the portal with AAD authentication method
2. Mark the check-box "Consent on behalf of your organization"
3. Click Accept

Manual Application Creation

If the administrator has refused the consent, they need to create such application manually in their Azure directory:

The screenshot below indicates that the admin consent has not yet been granted for the Auth0 application in the customer's Azure Active Directory:

Therefore:

1. The Global Admin of the tenant domain needs to navigate to their Azure Management portal and search for the RethinkUI-Auth0 application.
2. Click on Permissions blade, and click the "Grant admin consent for xxx.onmicrosoft.com" button.
   

After this, all users from the AAD of this tenant will be able to use AAD login method in the platform.

Limitations

• The consent process must be completed by a Global Administrator of the Azure tenant
• If admin consent is not granted during initial login, it must be added manually through the Azure portal
• The Auth0 application name in Azure is specifically "RethinkUI-Auth0" and cannot be changed

Summary

This article outlines the process for enabling Single Sign-On (SSO) for the AppXite platform using Azure Active Directory. It involves two key steps: first whitelisting the domain of the accessing email, and then providing admin consent for the Auth0 application either during initial login or manually through the Azure portal. Following these steps will enable all users from the specified tenant to access the AppXite platform using their Azure AD credentials.

Related Content

• How to Log In to the Platform With Different Options