This document describes the steps that are required to enable Single Sign On via Azure Active Directory.
Please note that Azure Active Directory is becoming Microsoft Entra ID. It may happen that this document describes ‘Active Directory’, but it has already been replaced by ‘Entra ID’ on the Azure portal.
Step 1: Get Tenant ID
The Digital Signage application needs the Tenant ID to realise the SSO functionality:
- Login to the Microsoft Azure portal - https://portal.azure.com - with an admin user
- Go to Active Directory
- Go to Overview
- Get Tenant ID
- Send Tenant ID to the contactperson of your CMS supplier.
As soon as we have received and processed the Tenant ID, we will contact you. After that, you can proceed with step 2.
Note: the SSO only works for sub-users!
Step 2: Connect Digital Signage application
In this step you will login to the Digital Signage application with your Microsoft Azure admin user:
- Go to https://app.cms-ds.com/login
- Click in ‘Sign in with Azure’ button
- Login with admin user
- The Digital Signage application will now appear at the list of Enterprise Applications on the Azure portal.
Step 3: Configure the Digital Signage application
In this step you will configure the application that now appears in the list of Enterprise Applications:
- Menu ‘Properties’: client needs to set ‘Enable for users to sign in’ to Yes, and ‘User assignment required’ to Yes.
- If ‘User assignment required’ is set to No - this means that all users from this Azure tenant can use the application to login to the CMS.
- If ‘User assignment required’ is set to Yes - this means that only assigned users from this Azure tenant can use the application to login to the CMS.
- Under ‘Users and Groups’, assign users that should have access to the Digital Signage application.
- Under permissions, set “Grant admin consent” to permission requests for Digital Signage application.
At this point, any assigned user can start using the Digital Signage application using the Single Sign On functionality.