Configuring Azure AD SSO

If you require SSO on your account please speak with your account manager

Prerequisites

• OpenFreight SSO Configuration Link (provided by your Relationship Manager)
• Azure AD administration credentials

OpenFreight

1. Open the OpenFreight SSO Configuration page in a new tab. Do not navigate away from this page or refresh as the link can only be accessed once
2. Select Microsoft as the Provider

Azure

1. Create a new Enterprise Application in Azure
2. Select Create your own application and give it a name
   
   
3. Select Manage -> Authentication and then click on Add a platform. Select Web from the Configure Platforms drawer
4. Copy the Redirect URL from the OpenFreight configuration page into the Redirect URIs field on Azure
5. Select Manage -> Certificates & secrets and generate a new Client secret. Paste this into the OpenFreight configuration screen
   
6.  Select Overview and copy the Application (client) ID and paste into the OpenFreight configuration screen
7. Open the Endpoints drawer and copy the OAuth 2.0 authorization endpoint (v2) and paste it into the OpenFreight configuration screen 8.
   
8. Select Save on the OpenFreight Configuration Page
9. Select Manage -> API Permissions and add the User.Read permission which can be found under delegated access
10. Grant admin consent for this permission
11. Let your Relationship Manager know these steps have been completed.