Setting up Azure AD SSO / step-by-step guide

Overview

This short guide should help you set up Azure AD for your Connecter Server. Note that the mapping between the two services is done on a team level - the users won’t be added just to a specific Workspace. The permissions management and assignment are done in the Team Portal.

Roles

There are two main roles involved in the configuration:

Team Portal admin - the sole administrator of everything connected with user and permissions management in Connecter Server. Can be changed by the Connecter Server Subscription owner from here.

Azure AD admin - a person that has full access to the administrative backend of Azure AD and can install new services.

Step-by-step guide

Actions that must be done by the Team Portal admin:

Select your team.

Click on the “Features” tab.

Click on “Get SCIM token” next to Azure AD SSO.

Use the button to copy the token to your clipboard.

Send the token to the Azure AD admin.

Actions performed by the Azure AD admin:

Navigate to Enterprise applications.

Select “New application”.

On the next screen use the search bar to find “Connecter” (application by Design Connected).

Click on the app and select “Sign up for Connecter”.

You will be redirected to the Team Portal. Ignore this screen, for now.

Go back to the Azure AD admin center tab and choose “Create your own application”.

Select “Integrate any other application you don't find in the gallery (Non-gallery)” and give it a relevant name.

In your new application overview select “Provisioning” from the menu and choose “Get started”.

Pick the Automatic provisioning mode.

In Admin Credentials fill:

Tenant URL - https://teamwork.connecterapp.com/scim/v2

Secret token - paste the one that you got from the Team Portal admin.

Test the connection to make sure that everything is working.

Set up the attribute mappings - you will need only userPrincipalName and displayName. Here’s a visual guide on how to set it up:

Couldn’t load preview

The file may have been moved or deleted, or is temporarily unavailable.

https://lh4.googleusercontent.com/N_2Nvxg7S5xFk2VL9L6T0HNhkL9urXp801XyjfCvVdFveePmRadk_Qvj2mNmnYePUZAtZfacrmhoxPXOW-uWR7K900O767T3CbPHTIG0yNEqsQg7zp9hMU7bUU8IVKESf0oZgv1b

That’s it - you are ready to synchronize your Azure AD users with Connecter.

Don't forget to assign your users to the application. Check the detailed guide here.

End-user log in

If the user hasn’t previously worked with Connecter, they will be greeted by the Workspaces screen. After clicking the “Server” button they will see the following screen:

Couldn’t load preview

The file may have been moved or deleted, or is temporarily unavailable.

https://lh5.googleusercontent.com/voIMtasBgwTaNeBaywPhpJqH2DfSim_XAA7X2jWKv1-iREY7SmgJAFk20ON5BjFTd1QbMIPODR98LIdHqauO5N96fYf0peVkHAr7Nyrfb1EkxQyyQ2cZVJYRQrCHxqeggr9vSmAT

Select the “Azure AD Account” and log in with the credentials like in every other application that supports SSO.

If the user has used Connecter Server workspace and want to switch to their Azure AD account, they will have to click on their name in the top right corner, then on “Manage Workspaces” and the “Server” button. Then select “Use different user” and the “Azure AD Account” option will appear.