Setting up Microsoft Active Directory SSO

Note: This is a paid feature on a per client basis, for more information please contact our sales team at sales@pheedloop.com.

One of the many integrations PheedLoop offers is Microsoft Azure. With this integration, you will be able to login as an admin, login to the virtual portal, and quickly register for an event using Microsoft Azure. 

Please note, SSO is only availible for Event Website / Registration and the Virtual Portal and Proposals / Stakeholder Portals (Attendee, Speaker, Sponsor, Exhibitor)

1. Configuring your Microsoft Active Directory account 

You will need to have access to a Microsoft Active Directory account and access to Active Directory. Before you can integrate with PheedLoop, you will have to configure some settings in your Active Directory Account.

1. From Azure’s Dashboard, navigate to Settings
2. From the Manage tab, navigate to to All Applications 
3. Select New Registration and select Accounts in any organizational directory (Any Azure AD directory - Multitenant) under Support Account Types
   1. Do not enter a redirect URL at this time.
4. Once the application has been created, the Application (Client) ID, and Directory (Tenant) ID can be entered into PheedLoop
   1. To get a Client Secret, select Add a certificate or secret under Client credentials, then select New client secret. You will be able to set a description, and expiry date for your secret key. 
   2. Copy the Value ID immediately after creating it, as it will not be visible afterwards. This key should be pasted into the PheedLoop Form, please see step 2: Connecting Microsoft Active Directory with PheedLoop for more information.
   3. Do not confuse the Value ID with the Secret ID. The Value ID is the correct item to use.
5. Under Platform Configurations select Add a Platform > Web. This is where you will need to add a Redirect URL.
   1. Registration
      1. Under Redirect URLs type the following URL: https://site.pheedloop.com/event/[your event code]/register#start
         1. You can find the event code in your PheedLoop Dashboard by navigating to Event > General Details
         2. Under Front-channel logout URL type the following URL: https://localhost:3000/logout
   2. Virtual Portal
      1. Under Redirect URLs type the following URL: https://pheedloop.com/{your event code}/virtual/
         
         1. You can find the organization code in your PheedLoop dashboard by navigating to Settings > Account > Event Power-ups > finding your event and entering the Code
         2. Under Front-channel logout URL type the following URL: https://localhost:3000/logout
   3. Dashboard:
      1. Under Redirect URLs type the following URL: https://dash.pheedloop.com/{your organization code}/login
         1. 1. You can find the organization code in your PheedLoop dashboard by navigating to Settings > Account and entering the Account ID
            2. Under Front-channel logout URL type the following URL: https://localhost:3000/logout
6. 1. Under Redirect URLs type the following URL: https://pheedloop.com/{your event code}/virtual/
      1. You can find the organization code in your PheedLoop dashboard by navigating to Settings > Account > Event Power-ups > finding your event and entering the Code
      2. Under Front-channel logout URL type the following URL: https://localhost:3000/logout
7. Toggle on the Access tokens (used for implicit flows) checkbox
   1. Permissions may need to be updated, these can be updated under API Permissions > Microsoft Graph > Delegated Permissions. PheedLoop uses the following scopes:
      1. openid
      2. profile
      3. User.Read
      4. Email
8. Ensure that you your User Groups have the correct permissions

2. Connecting Microsoft Active Directory with PheedLoop 

Once your Active Directory account is set up, you can now integrate your account within PheedLoop.

1. From the Event Dashboard, navigate to Settings > Integrations > Single Sign On Integrations
2. Under Microsoft Active Directory, select Not Connected
3. Enter your Active Directory credentials to allow PheedLoop to enable dashboard SSO for your organization
   1. Active Directory Tenant ID
   2. Active Directory Client ID
   3. Active Directory Client Secret (please see 4A. For more information)
4. Select Submit, your Microsoft Azure account will now be connected to your Event Dashboard

3. Testing Active Directory

There are a few ways to test out your Active Directory:

Logging into the PheedLoop Dashboard as an Administrator 

1. Ensure that whoever you are attempting to login via Microsoft Active Directory SSO has been added as a team member 
   1. This can be done from the drop-down menu at the top right corner of your Dashboard, navigate to Settings > Team Members > Team. 
2. Once this is done - logout - then go to dash.pheedloop.com and attempt to login with the Microsoft Active Directory Button
3. If you encounter the following error messages:
   "Unable to connect to Active Directory. Please try again later."  - This means the client_id or client_secret is incorrec
   "Unable to validate your profile. Please check with your administrator." - the "scopes" are likely insufficient

Logging into the PheedLoop Virtual Event as an Attendee 

1. Ensure that whoever you are attempting to login via Microsoft Active Directory SSO has an attendee profile in the Event Dashboard. 
   1. This can be done by going to Attendees > Attendees and selecting Create and fill out the member's information.