Skip to main content

Azure AD Integration with Sitecore 10.2

 Azure AD Integration with Sitecore 10.2

Sitecore identity server that comes with Sitecore 9.1 allows you to log in through an external identity provider like Azure Active Directory, Facebook, Apple, or Google. It is built on Federation Authentication.

What is Federation Authentication?

Federation authentication is a technology to allows users to access multiples application, tools, and domains using one credential. Using one set of credential user can access multiple applications, and resources after authentication. 

Federation authentication consists of two systems, the Identity provider and the Service provider. Identity providers that maintain/create/manage identity information like name, email address, device, and location. Some examples of identity providers are Azure AD, Google, Facebook, and Apple. Service providers basically refer to a website, software, or app that the user is trying to access and SP basically relies on the identity provider to authenticate the user and provide an identity.

There are three most commonly used protocols:
  1. SAML
  2. OAuth2.0
  3. OpenID Connect
Now come to the point, how can integrate Azure AD with Sitecore? Below are the steps to integrate Azure AD with Sitecore.

Azure AD Configuration

  • Go to the Azure portal and log in.
  • Then go to Azure Active Directory -> App registrations.
Azure AD Integration with Sitecore 10.2


  • Next click on the New registration button.
Azure AD Integration with Sitecore 10.2


  • Fill name, supported account type, and redirect URI and click on register button.



  • Now go to the Manifest tab and update groupMembershipClaims value to SecurityGroup.
Azure AD Integration with Sitecore 10.2


  • Go to the Authentication tab and check the ID tokens checkbox.
Azure AD Integration with Sitecore 10.2

  • Go to the Groups inside Azure Active Directory, and create a new group if you don't have already one.
Azure AD Integration with Sitecore 10.2

Azure AD Integration with Sitecore 10.2
  • Make sure you have added members to Demo_Admin group.
  • Finally, go to the Overview tab and save the client Id and tenant Id which are going to be used in the Sitecore config later.
Azure AD Integration with Sitecore 10.2

Sitecore Identity Server Configuration

  • Open inetpub\wwwroot\identityserverwebsite\sitecore\Sitecore.Plugin.IdentityProvider.AzureAd\Config\Sitecore.Plugin.IdentityProvider.AzureAd.xml and update ClientId and TenantId which was saved in previous step.
Azure AD Integration with Sitecore 10.2

 
Restart the Sitecore Identity Application and go to Sitecore Content Management to log in, now Azure AD button will be visible.

Azure AD Integration with Sitecore 10.2

Wait Wait Wait, this is not an end. A few steps are still pending :) 

  • Uncomment the below line from Sitecore.Plugin.IdentityProvider.AzureAd.xml and Copy the group id from Demo_Admin group and paste it. This I have done only for one group but it can be for multiple groups in a similar manner.Azure AD Integration with Sitecore 10.2

Sitecore Configuration


  • Create patch file in code,


Now restart your identity website and go to content management URL and click on Azure AD.

Azure AD Integration with Sitecore 10.2

Enter your username and password, after that Azure AD will redirect back to your Sitecore instance after successful login. You can go to User Manager, Sitecore will create same user here.


Comments

Popular posts from this blog

Sitecore 10.2 - “Failed to start service ‘Sitecore Marketing Automation Engine’” on Windows 11

Sitecore 10.2 - “Failed to start service ‘Sitecore Marketing Automation Engine' ” on Windows 11 Today I started to install Sitecore 10.2 using Sitecore Instance Manager on Windows 11 and I got this issue “Failed to start service ‘Sitecore Marketing Automation Engine' ” . Error : On event viewer it was showing the below error: I also tried to run ‘ Sitecore.MAEngine.exe ’ like this C:\Windows\system32>C:\inetpub\wwwroot\sclocal102xconnect.dev.local\App_Data\jobs\continuous\AutomationEngine\Sitecore.MAEngine.exe Which was throwing below error: Starting Marketing Automation Engine... 2022-01-29 22:21:11 ERR Error initializing XConnect client. System.AggregateException: One or more errors occurred. ---> Sitecore.XConnect.XdbCollectionUnavailableException: An error occurred while sending the request. ---> System.Net.Http.HttpRequestException: An error occurred while sending the request. ---> System.Net.WebException: The underlying connection was closed: An unexpected err

Sitecore CDP Certification - Tips and Tricks

Sitecore CDP Certification - Tips and Tricks Recently I completed Sitecore CDP (Customer Data Platform) certification. In this blog, I will share my personal experience and the steps I took to successfully complete the Sitecore CDP certification. Before diving into the certification journey, I researched various resources to plan my preparation effectively: CDP Certificate Competency  Competency 1: Customer Data Platform Competency 2: Real-time Behavior Data Ingestion Competency 3: Interactive API Competency 4: Batch Data Ingestion Competency 5: Audience Sync and Batch Segments Official Documentation https://doc.sitecore.com/cdp/en/users/sitecore-cdp/index-en.html   https://doc.sitecore.com/cdp/en/developers/api/index-en.html#UUID-980f86cc-d900-1d49-3523-030e16d197a2  https://doc.sitecore.com/cdp/ https://learning.sitecore.com/pages/66/sitecore-learning-home CDP & Personalize Mind Map A highly beneficial resource you can discover is the Mind Map . Exam Details The Sitecore CDP Cert