This section includes instructions on how to register Zen ZEN Master as an SSO app on Azure and configure the connection between Zen ZEN Master and Azure. To complete this process, you need to login as an Admin on both the Azure side and the Zen ZEN Master side. It is, therefore, recommended to have both open in parallel.
To setup Zen ZEN Master Azure SSO:
In Azure, go to Identity > Azure Active Directory > App Registrations.
Click New Registrations.
In the Name field, enter a name for the SSO app. This name will be displayed to the users when they use Azure as an SSO portal. For example, "Zen ZEN Master SSO".
Under Supported account types, specify who can access the Zen ZEN Master SSO app. In this case, it is recommended to select the Account in this organizational directory option.
In Zen ZEN Master, go to Account Management > Single Sign-On.
Click +Add.
In the Name field, enter a name for this SSO connection. This is the name will be not be shared and will be used for administration purposes onlythat will be displayed on the Azure button in the ZEN Master Sign In portal.
At the bottom of the screen, copy the Callback URL.
Back in Azure, paste the copied Callback URL into the Redirect URI field.
Click Register.
The following screen is displayed with the connection strings.
Copy the Application (client) ID from Azure and paste it to the Client ID field in Zen ZEN Master.
In Azure click Endpoints at the top.
Copy and paste the following credentials from Azure to Zen ZEN Master:
In Azure, go to Certificates & secrets.
Under Client Secrets, click New Client Secret.
In the Description field, enter any name for the client secret. For example, "Zen ZEN Master".
Under Expires, select the desired expiration time.
Click Add.
Copy the secret by clicking the Copy button.
In Zen ZEN Master, paste the copied secret into the Client Secret field.
If you to manually register Azure AD users to Zen ZEN Master (see ?? Pre-registering Users in ZEN Master for Azure section) before granting access, select the Allow pre-registered users only checkbox. The registration is simple and only include involves entering the user's email.
In Zen ZEN Master, click Save.
The newly created Azure SSO is added to the list of SSO profiles. The users defined in the Azure AD will be able to connect to Zen ZEN Master by selecting the newly created SSO option under Sign In With. During the first connection you will be required to provide permission to connect through Azure to Zen ZEN Master. As an administrator, you can select Consent on behalf of your organization option, which will not require additional consent by the other users.
However, if you have selected the Allow pre-registered users only option you will have need to manually pre-register the users by following the instructions below.