Dialog makes it easy for organizations by supporting Single Sign-On (SSO) with Azure AD. Azure Active Directory (Azure AD) is Microsoft's cloud-based identity and access management service that allows employees of your organization to sign in and access Dialog.
Requirements
Azure AD user with administrator rights | |
Dialog user with company administrator rights. |
Register an application in Azure AD:
To set up SSO, go to your Azure Portal and register an application. You can refer to the Official Microsoft docs for more information.
- Give the application a suitable name.
- Set the following Redirect URI for 'Web application': https://app.getdialog.nl/authenticated.
- Click on 'Register.
Copy the following information from the application page. You will need this information for the settings in Dialog.
- Microsoft Azure AD Domain
- Application (Client) ID
- Directory (Tenant) ID
Client secret
Create a client secret and copy the 'value' of the client secret.
Authentication settings
Click on 'Authentication' and on this page, under 'Implicit grant and hybrid flows,' select the following options:
- Access tokens (used for implicit flows)
- ID tokens (used for implicit and hybrid flows)
Setting up SSO in Dialog
Log in to Dialog and select 'Project Management' on the project selection page. Then click on 'Enable SSO.'
In the appearing screen, enter the information from Azure AD.
Note: If the SSO domain differs from the email address, you will be asked to enter the Identity Provider, which is the domain of the respective email address. Dialog uses this to recognize SSO users.
Click on 'Verify Credentials' and then on 'Save.' SSO is now configured.
Access
The first time you log in, you will be asked to confirm access for Dialog. The requested access is kept to a minimum:
- Signing in and reading the user profile.
- Maintaining access.