Rival Help CenterConveyIQ
Help CenterConveyIQEmployer resourcesIntegrations

SSO Setup: Azure AD SSO Configuration for ConveyIQ

This topic provides the steps required to configure Azure AD SSO for ConveyIQ.

Features

The following SSO features are supported:

FeatureDescription
Sign In from the ConveyIQ Sign In PageBy providing the email address on the ConveyIQ Sign In page the user will be redirected to Azure SSO and signed in to ConveyIQ.
Sign In from the Azure AD ‘My Applications’ PortalBy enabling the ConveyIQ application on the Azure AD portal for users to see…
Sign Out from ConveyIQ

Users can sign out from the ConveyIQ application without being signed out from Azure AD.

Users can sign out from Azure AD without being signed out from ConveyIQ.

Requirements

Connecting ConveyIQ to Azure AD requires configuring an Application in Microsoft Azure Active Directory to obtain OAuth 2.0 credentials. The credentials are required to Configure the OpenID Connector by submitting these credentials through a self-service flow provided by ConveyIQ.

Note: Step-by-step configuration instructions provided in the next chapter.

Configuration Steps

The following steps need to be completed to enable Azure AD SSO:

  • Register an Application and obtain credentials in the Azure Active Directory.
  • Configure the OpenID Connector in the ConveyIQ Application

Step 1: Register an Application and obtain credentials in the Azure AD Portal

  1. Sign into the Azure AD Portal: Microsoft Azure
  2. Go to the Azure Active Directory.
  3. Go to App registrations
  4. Start creating a New registration.
  5. Name the application, for example, ConveyIQ
  6. Choose the Single-tenant option: Accounts in this organizations directory only (Default Directory only - Single-tenant)
  7. Enter the following Web Redirect URI: https://identity-provider.na.conveyiq.com/session/oidc/authorization_code
  8. Click Register.
  9. The application creation is complete, now go to the Authentication page for the created application.
  10. Enable the ID tokens (used for implicit and hybrid flows).
  11. Click Save.
  12. Navigate to the Certificated & secrets page to create a client secret.
  13. Add a new client secret.
  14. Optional description, example: "ConveyIQ OIDC"
  15. Choose preferred duration.
  16. Click Add.

Configure the OpenID Connector in the ConveyIQ Application

  1. Look out for an email from Entelo with the subject line: ConveyIQ - OpenID Connect Configuration.

    Note: If you have not received an email yet, contact your Entelo CSM contact or the support team.

  2. In the email, click the link Configuration URL.
  3. On the Configuration step enter the:
    • Directory ID
    • Client ID
    • Client Secret

      Note: The required credentials can be found under the application details created in Step 1.

  4. Click Update.

At this point, all should be configured and the following is expected to work:

Active users in the ConveyIQ application should be able to sign in using Azure AD.