SSO Configuration: OAuth Gen

1. Log into Office 365 using https://apps.dev.microsoft.com/.
   
   
   Figure: Office 365 Login Screen
   
   

2. Enter your Office 365 credentials and login to the portal. My Applications page is displayed.
   
   
   Figure: My Applications page
   
   

   Note:

   Under Converged Applications you can configure both Office 365 and Azure. Under Azure AD only Applications you can configure only Azure.

3. Click Add an app under Converged Applications. Register your application pop-up page is displayed.
   
   
   Figure: Register your Application pop-up page
   
   

4. Specify a name for the application and click Create. The Application ID is displayed.
   
   
   Figure: Office 365 Page
   
   

   Note:

   The Application ID displayed here is the Client ID to be used in SummitAI application.

5. Click Generate New Password. A New password is generated and displayed in the Pop-up page. This is the only time the password is displayed. Store it securely.
   
   
   Figure: New Password generated pop-up page
   
   

   Note:

   The Password generated here is the Client Secret Key in SummitAI application. 

6. Click Add Platform under the Platforms section. The Add Platform pop-up page is displayed.
   
   
   Figure: Add Platform Pop-up page
   
   
7. On the Add Platform pop-up page, select Web.

8. Specify the Redirect URL. This URL is your SummitAI Web Application login URL. (Eg: https://baseurl/SUMMIT_SAMLResponse.aspx).
   
   

   Note

   • The Redirect URL you provide here should be entered in the Redirect URL field in SummitAI application.
   • The Delegated Permissions (user.read) displayed in the Microsoft Graph Permissions section should be entered in the Scope field of SummitAI application.

   
   Figure: Microsoft Graph Permissions section
   
   

9. Click SAVE after all the above actions are performed.
   
   
   Figure: Office 365 page
   

To Configure SSO for Office 365 from SummitAI:

1. Select Admin > Basic > Infrastructure > SSO Configuration. The SSO CONFIGURATION page is displayed.
2. On the SSO CONFIGURATION page, select OAuth under the Authentication Type and click ADD NEW on the ACTIONS Panel.
   
   
   Figure: SSO Configuration: OAuth_Office 365

   
   

3. Specify the required details and click SUBMIT. For more details about the fields on the SSO CONFIGURATION page, see Field Description.

Field Description

The following table describes the fields on the SSO CONFIGURATION page:

1. Log into Office 365 using https://apps.dev.microsoft.com/.
   
   Figure: Office 365 Login Screen
   
   

2. Enter your Office 365 credentials and login to the portal. My Applications page is displayed.
   
   
   Figure: My Applications page
   

   Note:

   Under Converged Applications you can configure both Office 365 and Azure. Under Azure AD only Applications you can configure only Azure.

3. Click Add an app under Converged Applications. Register your application pop-up page is displayed.
   
   
   Figure: Register your Application pop-up page
   
   

4. Specify a name for the application and click Create. The Application ID is displayed.
   
   
   Figure: Office 365 Page
   
   

   Note:

   The Application ID displayed here is the Client ID to be used in SummitAI application.

5. Click Generate New Password. A New password is generated and displayed in the Pop-up page. This is the only time the password is displayed. Store it securely.
   
   
   Figure: New Password generated pop-up page
   
   

   Note:

   The Password generated here is the Client Secret Key in SummitAI application. 

6. Click Add Platform under the Platforms section. The Add Platform pop-up page is displayed.
   
   
   Figure: Add Platform Pop-up page
   
   
7. On the Add Platform pop-up page, select Web.

8. Specify the Redirect URL. This URL is your SummitAI Web Application login URL. (Eg: https://baseurl/SUMMIT_Weblogin.aspx).

   Note:

   • The Redirect URL you provide here should be entered in the Redirect URL field in SummitAI application.
   • The Delegated Permissions (user.read) displayed in the Microsoft Graph Permissions section should be entered in the Scope field of SummitAI application.

   
   Figure: Microsoft Graph Permissions section
   
   

9. Click SAVE after all the above actions are performed.
   
   
   Figure: Office 365 page

To Configure SSO for Office 365 from SummitAI:

1. Select Admin > Basic > Infrastructure > SSO Configuration. The SSO CONFIGURATION page is displayed.
2. On the SSO CONFIGURATION page, select OAuth under the Authentication Type and click ADD NEW on the ACTIONS Panel.
   
   
   Figure: SSO Configuration: OAuth_Office 365
   
   
3. Specify the required details and click SUBMIT. For more details about the fields on the SSO CONFIGURATION page, see Field Description.

Field Description

The following table describes the fields on the SSO CONFIGURATION page:

Prerequisites to be performed in Azure Portal:

1. Go to https://portal.azure.com. The login page is displayed.
2. Login to the application with valid Azure credentials.
3. On the menu, click Azure Active Directory, and then click App Registrations.
   
   
   Figure: Azure Active Directory Menu
   
   
4. Click New App Registration. 
   
   
   Figure: New Application Registration Menu
   
   
5. Specify the Name, Application Type, and Sign-on URL. Click Create.
   
   
   Figure: Creating Application
   
   

6. The application is created and displayed in the list. Click the newly created application.
   
   
   Figure: Application Pop-up
   
   

   Note:

   The Application ID displayed here is the Client ID to be specified in SummitAI application.

   
   

7. Click Settings and then click Reply URLs. The Reply URL mentioned here is the Redirect URL to be entered in the SummitAI application.
   
   
   Figure: Reply URLs
   
   
8. Click Required Permissions and then click ADD.
   
   
   Figure: Required Permissions Menu
   
   
9. Click Select an API, and then select Microsoft Graph.
   
   x
   Figure: Selecting API
   
   
10. Click Select Permissions and select Send mail as a user, Sign in and read user profile under Delegate Permissions section, and click Done.
    
    
    Figure: Select Permissions Menu
    
    
11. Select Keys and specify the required information. Click Save.
    
    
    Figure: Keys Section
    
    

12. The Password is displayed. This is the only time you will be able to see it. Store it securely.
    
    
    Figure: Password

    Note:

    The Password displayed here is the Client Secret Key in SummitAI application.

To Configure SSO for Azure from SummitAI:

1. Select Admin > Basic > Infrastructure > SSO Configuration. The SSO CONFIGURATION page is displayed.
2. On the SSO CONFIGURATION page, select OAuth under the Authentication Type and click ADD NEW on the ACTIONS Panel.
   
   
   Figure: SSO Configuration: OAuth_Azure
   
   
3. Specify the required details and click SUBMIT. For more details about the fields on the SSO CONFIGURATION page, see Field Description.

Field Description

The following table describes the fields on the SSO CONFIGURATION page:

Prerequisites to be performed in Azure Portal:

1. Go to https://portal.azure.com. The login page is displayed.
2. Login to the application with valid Azure credentials.
3. On the menu, click Azure Active Directory, then click App Registrations.
   
   
   Figure: Azure Active Directory Menu
   
   
4. Click New App Registration.
   
   
   Figure: New Application Registration Menu
   
   
5. Specify the Name, Application Type, and Sign-on URL. Click Create.
   
   
   Figure: Creating Application
   
   

6. The application is created and displayed in the list. Click the newly created application.
   
   
   Figure: Application Pop-up 
   
   

   Note:

   The Application ID displayed here is the Client ID to be specified in SummitAI application.

   
   

7. Click Settings and then click Reply URLs. The Reply URL mentioned here is the Redirect URL in SummitAI application.
   
   
   Figure: Reply URLs
   
   
8. Click Required Permissions and then click ADD.
   
   
   Figure: Required Permissions Menu
   
   
9. Click Select an API and then select Microsoft Graph.
   
   
   Figure: Selecting API
   
   
10. Click Select Permissions and select Send mail as a user, Sign in and read user profile under Delegate Permissions section. click Done after selecting.
    
    
    Figure: Select Permissions Menu
    
    
11. Select Keys and specify the required information. Click Save.
    
    
    Figure: Keys section
    
    

12. The Password is displayed. This is the only time you will be able to see it. Store it securely.
    
    
    Figure: Password

    Note:

    The Password displayed here is the Client Secret Key in SummitAI application.

    
    

1. Log into Office 365 using https://apps.dev.microsoft.com/.
   
   
   Figure: Office 365 Login Screen
   
   

2. Enter your Office 365 credentials and login to the portal. My Applications page is displayed.
   
   
   Figure: My Applications page
   
   

   Note:

   Under Converged Applications you can configure both Office 365 and Azure. Under Azure AD only Applications you can configure only Azure.

3. Click Add an app under Converged Applications. Register your application pop-up page is displayed.
   
   
   Figure: Register your Application pop-up page
   
   

4. Specify a name for the application and click Create. The Application ID is displayed.
   
   
   Figure: Office 365 Page
   
   

   Note:

   The Application ID displayed here is the Client ID to be used in SummitAI application.

5. Click Generate New Password. A New password is generated and displayed in the Pop-up page. This is the only time the password is displayed. Store it securely.
   
   
   Figure: New Password generated pop-up page
   
   

   Note:

   The Password generated here is the Client Secret Key in SummitAI application. 

6. Click Add Platform under the Platforms section. The Add Platform pop-up page is displayed.
   
   
   Figure: Add Platform Pop-up page
   
   
7. On the Add Platform pop-up page, select Web.

8. Specify the Redirect URL. This URL is your SummitAI Web Application login URL. (Eg: https://baseurl/SUMMIT_Weblogin.aspx).

   Note

   • The Redirect URL you provide here should be entered in the Redirect URL field in SummitAI application.
   • The Delegated Permissions (user.read) displayed in the Microsoft Graph Permissions section should be entered in the Scope field of SummitAI application.

   
   Figure: Microsoft Graph Permissions section
   
   

9. Click SAVE after all the above actions are performed.
   
   
   Figure: Office 365 page

To Configure SSO for Azure from SummitAI:

1. Select Admin > Basic > Infrastructure > SSO Configuration. The SSO CONFIGURATION page is displayed.
2. On the SSO CONFIGURATION page, select OAuth under the Authentication Type and click ADD NEW on the ACTIONS Panel.
   
   
   Figure: SSO Configuration: OAuth_Azure
   
   
3. Specify the required details and click SUBMIT. For more details about the fields on the SSO CONFIGURATION page, see Field Description.

Field Description

The following table describes the fields on the SSO CONFIGURATION page:

1. Log into Facebook using https://developers.facebook.com/. Click Log In.
   
   
   Figure: Login Page
   
   
2. The Facebook login page is displayed. Specify your User Name and Password and click Log In. If you do not have an account already, click Create New Account to Sign up.
   
   
   Figure: Facebook Login Screen
   
   
3. On the top right corner, hover your mouse over My Apps, and then click Add a New App.
   
   
   Figure: Add a New App
   
   
4. Create a New App ID pop-up page is displayed. Specify a Display Name and Contact Email, and then click Create App ID.
   
   
   Figure: Create App ID page
   
   

5. You are redirected to the Dashboard page. The App ID is displayed on the top left corner of the page. Click Show to view the App Secret.

   Note:

   • The App ID displayed here should be entered in the Client ID field of SummitAI application.
   • The Client Secret displayed here should be entered in the Client Secret Key field of SummitAI application.

   
   Figure: Dashboard page

   
   

6. Click Settings > Basic. Specify the required information in the fields. Select the Category as Utility & Productivity.
   
   
   Figure: Settings page
   
   
7. Click Add Platform. The Select Platform pop-up page is displayed. Select Website.
   
   
   Figure: Select Platform Page
   
   
8. Specify the Site URL and click Save Changes.
   
   
   Figure: Basic Settings page
   
   
9. Click Advanced and Allow API Access to App Settings.
   
   
   Figure: Advanced Settings Page
   
   
10. Click Save Changes.
11. Click App Review and make your app Public by clicking Yes.
    
    
    Figure: App Review Page
    
    
12. Click Add Product and select Facebook Login.
    
    
    Figure: Add Product
    
    

13. Under the Valid OAuth redirect URLs section, specify a Re-direct URL.
    
    
    Figure: Redirect URL
    
    

    Note:

    The Redirect URL specified here should be entered in the Redirect URL field of SummitAI Application.

    
    

To Configure SSO for Facebook from SummitAI:

1. Select Admin > Basic > Infrastructure > SSO Configuration. The SSO CONFIGURATION page is displayed.
2. On the SSO CONFIGURATION page, select OAuth under the Authentication Type and click ADD NEW on the ACTIONS Panel.
   
   
   Figure: SSO Configuration: OAuth_Facebook
3. Specify the required details and click SUBMIT. For more details about the fields on the SSO CONFIGURATION page, see Field Description.

Field Description

The following table describes the fields on the SSO CONFIGURATION page:

1. Log into Facebook using https://developers.facebook.com/. Click Log In.
   
   
   Figure: Login Page
   
   
2. The Facebook login page is displayed. Specify your User Name and Password and click Log In. If you do not have an account already, click Create New Account to Sign up.
   
   
   Figure: Facebook Login Screen
   
   
3. On the top right corner, hover your mouse over My Apps, and then click Add a New App.
   
   
   Figure: Add a New App
   
   
4. Create a New App ID pop-up page is displayed. Specify a Display Name and Contact Email, and then click Create App ID.
   
   
   Figure: Create App ID page
   
   

5. You are redirected to the Dashboard page. The App ID is displayed on the top left corner of the page. Click Show to view the App Secret.

   Not:

   • The App ID displayed here should be entered in the Client ID field of SummitAI application.
   • The Client Secret displayed here should be entered in the Client Secret Key field of SummitAI application.

   
   Figure: Dashboard page

   
   

6. Click Settings > Basic. Specify the required information in the fields. Select the Category as Utility & Productivity.
   
   
   Figure: Settings page
   
   
7. Click Add Platform. The Select Platform pop-up page is displayed. Select Website.
   
   
   Figure: Select Platform Page
   
   
8. Specify the Site URL and click Save Changes.
   
   
   Figure: Basic Settings page
   
   
9. Click Advanced and Allow API Access to App Settings.
   
   
   Figure: Advanced Settings Page
   
   
10. Click Save Changes.
11. Click App Review and make your app Public by clicking Yes.
    
    
    Figure: App Review Page
    
    
12. Click Add Product and select Facebook Login.
    
    
    Figure: Add Product
    
    

13. Under the Valid OAuth redirect URLs section, specify a Re-direct URL.
    
    
    Figure: Redirect URL

    Note:

    The Redirect URL specified here should be entered in the Redirect URL field of SummitAI Application.

    
    

To Configure SSO for Facebook from SummitAI:

1. Select Admin > Basic > Infrastructure > SSO Configuration. The SSO CONFIGURATION page is displayed.
2. On the SSO CONFIGURATION page, select OAuth under the Authentication Type and click ADD NEW on the ACTIONS Panel.
   
   
   Figure: SSO Configuration: OAuth_Facebook
3. Specify the required details and click SUBMIT. For more details about the fields on the SSO CONFIGURATION page, see Field Description.

Field Description

The following table describes the fields on the SSO CONFIGURATION page:

Prerequisites to be performed in Okta Portal  

1. Sign up in Okta portal using https://www.okta.com/developer/signup/.
   
   
   Figure:  Sign up
2. Click Get Started. Your login URL is displayed. Login to Okta using this URL. You will receive a confirmation mail. Set your password by clicking this link.
   
   
   Figure:  Okta URL
3. Specify your User Name and Password and click Sign In.
   
   
   Figure:  Okta Login page
4. On the top menu, select Security > API.
   
   
   Figure:  Security Menu
5. On the API page, click Authorization Servers.
   
   
   Figure:  API Page
6. On the Add Authorization Server pop-up page, Specify Name, Audience, and Description. For more information about these fields, refer https://developer.okta.com/authentication-guide/implementing-authentication/set-up-authz-server.html.
   
   
   Figure:  Add Authorization URL Pop-up page

7. Under the Settings section, the issuer field is displayed. Store this URL securely.
   
   
   Figure: Settings section

   Note:

   The Issuer URL displayed here should be entered in the Authorization URL, Access Token URL, and User Info URL fields of SummitAI application.

8. Select Access Policies and click Add Policy. The Add Policy pop-up page is displayed.
   
   
   Figure:  Add Policies pop-up page
9. On the Add Policy pop-up page, specify the Name, and Description and click Create Policy.
   
   
   Figure:  Add Policy page.
10. On the Add New Access Policy page, create Add Rule.
    
    
    Figure:  Add New Access Policy Page
11. On the Add Rule pop-up page, specify the Rule Name and click Create Rule.
    
    
    Figure:  Add Rule Pop-up page
12. On the top menu, hover your mouse over Applications and select Applications.
    
    
    Figure:  Applications
13. On the Applications page, click Add Application and then click Create New App.
    
    
    Figure:  Add Application
14. On the Create New Application pop-up page, select the platform as Web and Sign On Method as OpenID Connect.
    
    
    Figure:  Create New App page

15. On the Create OpenID page, specify the Application Name and the Redirect URL.
    
    
    Figure:  Create OpenID page

    Note:

    The Redirect URL specified here should be entered in the Redirect URL field of SummitAI application.

16. On the General Settings Page, click Edit and select all the available options under Allowed grant types. The Client ID and Client Secret are displayed under Client Credentials section. Store them securely.
    
    
    Figure:  General Settings page

    Note:

    The Client ID and Client Secret displayed here should be entered in the Client Id and Client Secret Key fields of SummitAI application.

17. You can add multiple People or Groups to the application under the Assignments section.
    
    
    Figure:  Add Assignment page

To Configure SSO for Okta from SummitAI:

1. Select Admin > Basic > Infrastructure > SSO Configuration. The SSO CONFIGURATION page is displayed.
2. On the SSO CONFIGURATION page, select OAuth under the Authentication Type and click ADD NEW on the ACTIONS Panel.
   
   
   Figure:  SSO Configuration: OAuth_Okta
3. Specify the required details and click SUBMIT. For more details about the fields on the SSO CONFIGURATION page, see Field Description.

Field Description

The following table describes the fields on the SSO CONFIGURATION page:

Prerequisites to be performed in Okta Portal  

1. Sign up in Okta portal using https://www.okta.com/developer/signup/.
   
   
   Figure:  Sign up
2. Click Get Started. Your login URL is displayed. Login to Okta using this URL. You will receive a confirmation mail. Set your password by clicking this link.
   
   
   Figure:  Okta URL
3. Specify your User Name and Password and click Sign In.
   
   
   Figure:  Okta Login page
4. On the top menu, select Security > API.
   
   
   Figure:  Security Menu
5. On the API page, click Authorization Servers.
   
   
   Figure:  API Page
6. On the Add Authorization Server pop-up page, Specify Name, Audience, and Description. For more information about these fields, refer https://developer.okta.com/authentication-guide/implementing-authentication/set-up-authz-server.html.
   
   
   Figure:  Add Authorization URL Pop-up page

7. Under the Settings section, the issuer field is displayed. Store this URL securely.
   
   
   Figure: Settings section

   Note:

   The Issuer URL displayed here should be entered in the Authorization URL, Access Token URL, and User Info URL fields of SummitAI application.

8. Select Access Policies and click Add Policy. The Add Policy pop-up page is displayed.
   
   
   Figure:  Add Policies pop-up page
9. On the Add Policy pop-up page, specify the Name, and Description and click Create Policy.
   
   
   Figure:  Add Policy page.
10. On the Add New Access Policy page, create Add Rule.
    
    
    Figure:  Add New Access Policy Page
11. On the Add Rule pop-up page, specify the Rule Name and click Create Rule.
    
    
    Figure:  Add Rule Pop-up page
12. On the top menu, hover your mouse over Applications and select Applications.
    
    
    Figure:  Applications
13. On the Applications page, click Add Application and then click Create New App.
    
    
    Figure:  Add Application
14. On the Create New Application pop-up page, select the platform as Web and Sign On Method as OpenID Connect.
    
    
    Figure:  Create New App page

15. On the Create OpenID page, specify the Application Name and the Redirect URL.
    
    
    Figure:  Create OpenID page

    Note:

    The Redirect URL specified here should be entered in the Redirect URL field of SummitAI application.

16. On the General Settings Page, click Edit and select all the available options under Allowed grant types. The Client ID and Client Secret are displayed under Client Credentials section. Store them securely.
    
    
    Figure:  General Settings page

    Note:

    The Client ID and Client Secret displayed here should be entered in the Client Id and Client Secret Key fields of SummitAI application.

17. You can add multiple People or Groups to the application under the Assignments section.
    
    
    Figure:  Add Assignment page

To Configure SSO for Okta from SummitAI: 

1. Select Admin > Basic > Infrastructure > SSO Configuration. The SSO CONFIGURATION page is displayed.
2. On the SSO CONFIGURATION page, select OAuth under the Authentication Type and click ADD NEW on the ACTIONS Panel.
   
   
   Figure:  SSO Configuration: OAuth_Okta 
3. Specify the required details and click SUBMIT. For more details about the fields on the SSO CONFIGURATION page, see Field Description.

Field Description

The following table describes the fields on the SSO CONFIGURATION page: