Skip to main content

Azure Active Directory (AD) SSO & Calendar Synchronization Setup (For IT Admin of Enterprises Using Azure AD SSO)

Updated over 3 weeks ago

Active Directory is a system commonly used to manage the identities in an organization. Azure provides an SSO (Single Sign-on) layer on top of Active Directory that can be used to provide an SSO experience for the organization members.

It is worth noting that setting up Azure for your organization will require actions from Brief AI. Please get in touch should your organization like to enable Azure AD SSO and calendar synchronization.

For segregated environments, the intended setup includes a custom login page for your organization in a custom domain (e.g. [organization].wiseworks.ai). The custom login page has been configured to allow Azure sign-in with your Azure domain, and to take users to the specific Azure AD SSO instance.

Azure AD SSO setup

To set up Azure AD SSO, a new enterprise application needs to be configured in Azure. To do this via the UI, please follow these steps carefully:

  1. Visit Azure Active Directory page.

  2. Go to > "App Registrations" > "Register New Application".
    ​

  3. Fill in the name and choose the access level as desired.
    ​


    ​

  4. For "Redirect URI" choose "Web" from the dropdown and write "https://keycloak.app.wiseworks.ai/realms/prod/broker/<broker_id>/endpoint" or, if your organisation has been assigned a custom domain name, "https://keycloak.<organization>.wiseworks.ai/realms/<organization>/broker/<broker_id>/endpoint" in the field next to it. Please consult Brief AI for the correct organisation and broker_id value.

  5. Press register.

  6. Note the "Application (client) ID" which needs to be submitted to Brief AI.

  7. Navigate to "Certificates and secrets" and choose "Create a new client secret". Give a description and choose an expiration. Once created, note the "Value" in the table generated as well as the chosen expiration date. These is the Client secret and Client secret expiration date that need to be shared with Brief AI.
    ​

  8. Note the Tenant ID which can be accessed by opening "Azure Active Directory" on the field "Directory (tenant) ID" in the "Essentials" section.
    ​

Provide the collected values (Client ID, Client Secret, Client Secret Expiration Date, Tenant ID) to Brief AI to configure the SSO.

Azure Calendar Synchronization

Azure AD SSO allows calendar synchronization from Office 365 calendars. To enable this:

  1. Navigate to "API Permissions" on the registration page for the app created in the previous section. Choose "Add a permission" on the page.
    ​

  2. Select "Microsoft Graph" on the panel that opens on the right. Finally select the following items under "Delegated permissions":

    1. Select all items under "OpenId permissions".

    2. Select "Calendars.Read" under "Calendars".

    3. Select "User.Read" under "User".

  3. Finally, click on "Grant admin access" button.

This will allow Brief AI to access the Office 365 calendar on the user's behalf.

Did this answer your question?