Add Azure AD authentication to your system

After you have prepared the Azure portal, you can add the Azure AD authentication to your DXP - Open Edition.

Prerequisites

Procedure

  1. In the DXP - Open Edition Cockpit, go to Settings, and click System Settings.

  2. Navigate to the Authentication tab and click Edit.

  3. Click + Add and select Azure AD.

    settings auth azure ad

    Result: The Authentication dialog opens.

  4. Enter a meaningful Name.

  5. Check Active to activate this authentication method.

  6. Check Show on Login page to show the login screen on the DXP - Open Edition Session Login Page.

  7. Enter a Description.

  8. Enter a Path to retrieve a DXP - Open Edition session (for example, open-edition-ad-bearer). You can add any string as a path.

  9. In Identity Metadata, enter a link to a metadata document that contains information required for an app to sign-in.

  10. From your Azure AD account, enter the Tenant ID of your DXP - Open Edition.

  11. Enter your application’s Client ID from the Azure portal.

  12. Enter the Client Secret key that you generated in New client secret in the Azure portal.

  13. Additional Scopes

  14. Use silent signout in PWA tba

  15. Use MSAl v2 tba

  16. In Claims Assignment, click Add to add claims assignments.

  17. In Auto Assignment, assign roles and departments that are defined in the Azure portal/in your system?

  18. In Custom Script, you can enter your custom code.

  19. Click OK to save your input.

    Result: The Authentication dialog closes.

  20. In System Settings, click Restart to activate Azure AD authentication.

Result

You have configured and activated Azure AD authentication for your DXP - Open Edition.