Initial Azure Account Configuration

To synchronize users and enable SSO (Single Sign-On) between Office 365 and Witco, it is essential to correctly configure your Azure account.

Creating the Azure Application

• Accessing the Azure Portal

  1. Log in to the Azure portal.
  2. Navigate to the App registrations section.

• Application Registration

  1. Click New registration to display the registration form:
     
  2. In the Name field, enter the name of the application:
     
  3. In the Supported account types field, select "Accounts in this organizational directory only" as the supported account type.

• Retrieving the Identifiers

  1. Once the application is created, go to the Overview section.
  2. Retrieve the Application ID and Directory ID.
     These identifiers will be necessary for configuration in Witco.
     

Web Authentication Configuration

Go to the Manage → Authentication section:

• Setting Up Redirect URIs
  Configure specific redirect URIs for each environment (production, preproduction, development, local), following the format in the table below:

• Setting Up Logout URLs
  Configure specific logout URLs for each environment (production, preproduction, development, local), following the format in the table below:

• Setting Up Authentication in Your Application
  1. Go to the application you created.
  2. In the Manage → Authentication section, click on Add a platform.
  3. In the Configure platforms → Web applications section, choose Single-page application:
     
  4. The Redirect URIs and Front-channel logout URL fields will appear:
     
  5. Enter the redirect URIs and logout URLs you obtained earlier.

Mobile Authentication Configuration

• Setup for Mobile Applications
  Similar to web authentication, configure a redirect URI for mobile applications.
  The URI for the four types of environments (production, preprod, development, and local) is http://localhost:30662.
  

• Setting Up Authentication in Your Application

  1. Go to the application you created.
  2. In the Manage → Authentication section, click on Add a platform.
  3. In the Configure platforms → Web applications section, choose Web.
  4. The Redirect URIs field will appear.
  5. Enter the redirect URI:
     

User Synchronization

Creating the Client Secret

1. Go to the application you created.
2. In the Manage → Certificates & secrets → Client secrets section of your Azure application, click on New client secret:
   
3. In the Add a client secret section:
   • Enter a description.
   • Choose the expiration duration for the client secret (1 year, 2 years, or never):
     
   • Click Add to validate the creation.
4. Note the Client secret, which will be used for configuration in Witco (example below):
   

Assigning and Activating Permissions

• 1. Go to the Manage → API permissions section.
  2. Click Add a permission:
     
  3. In the Request API permissions → Select an API window, click Microsoft Graph:
     
  4. In the Select permissions section, type User.Read.All in the text field.
  5. In the Select permissions → Permission → User section, check the User.Read.All box:
     
  6. (Optional) If you manage groups, also add Group.Read.All in the same way.

• Activating Permissions

  • The new permissions will have an alert ("Not granted permission").
  • Use an administrator account to grant and activate the permissions:
    

Data to Provide to Witco

Once the configurations are completed, it is crucial to provide the information below to the Witco team to finalize the integration:

• Azure Application Identifiers
  Provide the following:
  • Application ID
  • Directory ID
  • Client secret
  • Client secret expiration date.

User Import

Determine whether all users should be imported from your Active Directory (AD) or only specific groups. For each group, provide the group ID and name.

User Fields to Import

Specify the fields to import and display in Witco, such as name, first name, phone number (landline and/or mobile), job title, department, office, etc. Also, provide the corresponding AD field names.

Testing and Validation

Test Users

Share with Witco test users, real or fictitious, to validate the import, synchronization, and logins across all environments.
Provide the name, email address, and password for each test user.