This article covers connecting the Foray ADAMS solution to an Azure Active Directory (AD) domain. This connection allows users to login to the Foray ADAMS solution and also allows Foray ADAMS to perform queries necessary to enforce privileges for both data and features.
...
To complete these steps you will need the following information from Foray:
Adams Admin - Redirect URLURI
Adams Admin - Front-channel Logout URL
Adams Web - Web Redirect URLURI
Adams Web - Single-page application Redirect URI
Adams Web - Front-channel Logout URL
Note |
---|
The provided URLs may not be accessible when this configuration is performed. The configuration can still be completed. |
...
Open the Azure Portal
Navigate to Azure Active Directory
App registrations
New registration
Name - Foray Adams Web, Foray Adams Admin, or Foray Adams Clients
This name is visible to end users. You may use a different name if you chose. If so you will need to identify that name later in these steps. You can change this name later.Supported account types: Accounts in this organizational directory only
Redirect URI
Adams Admin
Web
This URL will be provided by Foray. It will be similar to:
ExampleCode Block https://web01.myagency.foray.com/AdamsAdmin/Account/Login
Adams Web
This URL will be provided by Foray. It will be similar to:
ExampleCode Block https://web01.myagency.foray.com/AdamsWeb/Login.aspx
Adams Clients
Select "Public client/native (mobile & desktop)" from the dropdown
Enter the value: https://login.microsoftonline.com/common/oauth2/nativeclient
Click Register
...
Select the application to be configured
Authentication
For Adams Admin
Front-channel Logout URL
This URL is provided by Foray for logout. It will be similar to:
Example
Code Block language xml https://web01.myagency.foray.com/AdamsAdmin/Account/AzureSingleSignOut
Implicit grant and hybrid flows - check ID Tokens
For Adams Web
Click Add a platform
Select Single-page application
Enter the Redirect URI provided by Foray. It will be similar to:
ExampleCode Block https://web01.myagency.foray.com/AdamsWeb/ApiRedirect.html
If prompted, choose to migrate the URI for use with SPA and MSAL.js 2.0
Front-channel Logout URL
This URL is provided by Foray for logout. It will be similar to:
ExampleCode Block https://web01.myagency.foray.com/AdamsWeb/Logout.aspx
Implicit grant and hybrid flows
Check Access tokens
Check ID tokens
Supported account types: Accounts in this organizational directory only
Allow public client flows - Enable the following mobile and desktop flow
Adams Admin and Adams Web: NO
Adams Clients - YES
Click Save
...