Configuration Single Sign On through Microsoft Azure Active Directory

This document outlines the steps required to register PVBS as an application within an Azure Active Directory Tenant, and configure PVBS to log users in using Single Sign On (SSO).

App Registration

The following steps outline the app registration process.

  1. Open the Azure AD portal.
  2. Under ‘App Registrations’, create a new registration.
  3. Give the registration a name. e.g. ‘Fleetwise | PVBS’.
  4. Add a Redirect URI. This needs to be https://TENANT.fleetwise.co.nz/, where ‘TENANT’ is the identifier for your PVBS tenancy, provided by Fleetwise.
  5. Hit Register.
  6. The new App Registration will be opened. Make a note of the Application ID and Directory ID.
  7. Under Redirect URIs, you should have one web URI. We need to add a second URI. Navigate to the Authentication Tab
  8. Click ‘Add URI’. Enter https://TENANT.fleetwise.co.nz/pvbs/app/, again replacing TENANT with the identifier for your PVBS tenancy. Hit Save.
  9. Enable the Access Tokens and ID Token options.
  10. The App Registration is now ready. Send the Directory ID and Application ID to your contact at Fleetwise.

  11. Open App Registrations in Azure Active Directory
  12. Select Token Configuration and add an optional claim to ID Token
  13. Select ‘email’ and add the claim
  14. Confirm by turning on Graph email permission
  15. Go to API permissions menu and click on Grant admin consent button
  16. Confirm the admin consent