Skip to main content

Azure AD Integration with Sitecore 10.2

 Azure AD Integration with Sitecore 10.2

Sitecore identity server that comes with Sitecore 9.1 allows you to log in through an external identity provider like Azure Active Directory, Facebook, Apple, or Google. It is built on Federation Authentication.

What is Federation Authentication?

Federation authentication is a technology to allows users to access multiples application, tools, and domains using one credential. Using one set of credential user can access multiple applications, and resources after authentication. 

Federation authentication consists of two systems, the Identity provider and the Service provider. Identity providers that maintain/create/manage identity information like name, email address, device, and location. Some examples of identity providers are Azure AD, Google, Facebook, and Apple. Service providers basically refer to a website, software, or app that the user is trying to access and SP basically relies on the identity provider to authenticate the user and provide an identity.

There are three most commonly used protocols:
  1. SAML
  2. OAuth2.0
  3. OpenID Connect
Now come to the point, how can integrate Azure AD with Sitecore? Below are the steps to integrate Azure AD with Sitecore.

Azure AD Configuration

  • Go to the Azure portal and log in.
  • Then go to Azure Active Directory -> App registrations.
Azure AD Integration with Sitecore 10.2


  • Next click on the New registration button.
Azure AD Integration with Sitecore 10.2


  • Fill name, supported account type, and redirect URI and click on register button.



  • Now go to the Manifest tab and update groupMembershipClaims value to SecurityGroup.
Azure AD Integration with Sitecore 10.2


  • Go to the Authentication tab and check the ID tokens checkbox.
Azure AD Integration with Sitecore 10.2

  • Go to the Groups inside Azure Active Directory, and create a new group if you don't have already one.
Azure AD Integration with Sitecore 10.2

Azure AD Integration with Sitecore 10.2
  • Make sure you have added members to Demo_Admin group.
  • Finally, go to the Overview tab and save the client Id and tenant Id which are going to be used in the Sitecore config later.
Azure AD Integration with Sitecore 10.2

Sitecore Identity Server Configuration

  • Open inetpub\wwwroot\identityserverwebsite\sitecore\Sitecore.Plugin.IdentityProvider.AzureAd\Config\Sitecore.Plugin.IdentityProvider.AzureAd.xml and update ClientId and TenantId which was saved in previous step.
Azure AD Integration with Sitecore 10.2

 
Restart the Sitecore Identity Application and go to Sitecore Content Management to log in, now Azure AD button will be visible.

Azure AD Integration with Sitecore 10.2

Wait Wait Wait, this is not an end. A few steps are still pending :) 

  • Uncomment the below line from Sitecore.Plugin.IdentityProvider.AzureAd.xml and Copy the group id from Demo_Admin group and paste it. This I have done only for one group but it can be for multiple groups in a similar manner.Azure AD Integration with Sitecore 10.2

Sitecore Configuration


  • Create patch file in code,


Now restart your identity website and go to content management URL and click on Azure AD.

Azure AD Integration with Sitecore 10.2

Enter your username and password, after that Azure AD will redirect back to your Sitecore instance after successful login. You can go to User Manager, Sitecore will create same user here.


Labels:

Comments

Post a Comment

Popular posts from this blog

Sitecore 10.2 - “Failed to start service ‘Sitecore Marketing Automation Engine’” on Windows 11

Sitecore 10.2 - “Failed to start service ‘Sitecore Marketing Automation Engine' ” on Windows 11 Today I started to install Sitecore 10.2 using Sitecore Instance Manager on Windows 11 and I got this issue “Failed to start service ‘Sitecore Marketing Automation Engine' ” . Error : On event viewer it was showing the below error: I also tried to run ‘ Sitecore.MAEngine.exe ’ like this C:\Windows\system32>C:\inetpub\wwwroot\sclocal102xconnect.dev.local\App_Data\jobs\continuous\AutomationEngine\Sitecore.MAEngine.exe Which was throwing below error: Starting Marketing Automation Engine... 2022-01-29 22:21:11 ERR Error initializing XConnect client. System.AggregateException: One or more errors occurred. ---> Sitecore.XConnect.XdbCollectionUnavailableException: An error occurred while sending the request. ---> System.Net.Http.HttpRequestException: An error occurred while sending the request. ---> System.Net.WebException: The underlying connection was closed: An unexpected err
Post a Comment
Read more

Sitecore Custom API Issue with Federation Authentication

Sitecore Custom API Issue with Federation Authentication In earlier segments, detailed in Part 1 and Part 2 of the blogs on Keycloak Integration with Sitecore, I introduced Keycloak functionality for CM login. Concurrently, I addressed a necessity to develop custom APIs for retrieving Sitecore users and roles. Following the development of custom APIs, during authentication failures, the API erroneously returned a status code of 200 instead of 401. The problem arose because API requests were being routed through the "owin.identityProviders" pipeline, which was not intended for API usage. Solution: When OWIN identifies a 401 response and the AuthenticationMode is set to "Active," it fails to capture the URL hash included in the request. Another choice is to activate the "Passive" AuthenticationMode, wherein OWIN refrains from actively intercepting 401 responses. In passive mode, your application needs to explicitly issue a Challenge to trigger the OWIN aut
Post a Comment
Read more