Azure Active Directory Connection - Revision history

Dlim at 07:31, 6 September 2023

2023-09-06T07:31:00Z

Dlim at 22:28, 15 March 2022

2022-03-15T22:28:33Z

Dlim at 04:03, 15 March 2022

2022-03-15T04:03:39Z

Dlim at 04:03, 15 March 2022

2022-03-15T04:03:10Z

Dlim: Created page with "==Instructions for setting up Azure Active Directory Connection== Head to '''Azure Active Directory dashboard''', click on '''Manage Azure Active Directory'''
File:Azure..."

2022-03-15T03:58:28Z

Created page with "==Instructions for setting up Azure Active Directory Connection== Head to '''Azure Active Directory dashboard''', click on '''Manage Azure Active Directory''' File:Azure..."

New page

==Instructions for setting up Azure Active Directory Connection==

Head to '''Azure Active Directory dashboard''', click on '''Manage Azure Active Directory''' [[File:Azure_1.png|1500px]]

Come to the tenant and click on '''App registration''' [[File:Azure_2.png|1500px]]

Click on '''New registration''' [[File:Azure_3.png|1500px]]

Name the application and register.

On the registered app page, click on '''Certificates and secrets'''
[[File:Azure_4.png|1500px]]

Add a new secret by clicking '''New Client Secret''' and save the secret value for future use.
[[File:Azure_5.png|1500px]]

Click on '''API permissions'''
[[File:Azure_6.png|1500px]]

Add permission and select '''Microsoft Graph API'''
[[File:Azure_7.png|1500px]]

Add the following permissions separately:
*Delegated permissions
*Application.Read.All
*Application.ReadWrite.All
*Directory.AccessAsUser.All
*Directory.Read.All
*Directory.ReadWrite.All
*Domain.Read.All
*Domain.ReadWrite.All
*Group.Read.All
*Group.ReadWrite.All
*GroupMember.Read.All
*GroupMember.ReadWrite.All
*User.ManageIdentities.All
*User.Read
*User.Read.All
*User.ReadBasic.All
*User.ReadWrite
*User.ReadWrite.All

Application permissions
*Application.Read.All
*Application.ReadWrite.All
*Application.ReadWrite.OwnedBy
*Directory.Read.All
*Directory.ReadWrite.All
*Domain.Read.All
*Domain.ReadWrite.All
*Group.Create
*Group.Read.All
*Group.ReadWrite.All
*GroupMember.Read.All
*GroupMember.ReadWrite.All
*User.ManageIdentities.All
*User.Read.All
*User.ReadWrite.All

Grant admin consent
[[File:Azure_8.png|1500px]]

Permission granted
[[File:Azure_9.png|1500px]]

Head to '''Cloudwork dashboard'''>'''External Domains'''>'''Azure Active Directory'''>'''Add new'''
[[File:Azure_10.png|1500px]]

App Object ID - Object Id for the registered app 
Client Id: Application Id for the registered app 
Tenant Id: Tenant Id 
Client secret: secret value saved before 

If the secret is going to expire, there will be a warning message with the days to expire
[[File:Azure_11.png|1500px]]

To renew the secret, head to '''Home''' > '''App registration'''
[[File:Azure_12.png|1500px]]

Click on to the app used in Cloudwork, and head to Certificates & secrets, remove the expired secret and add a new secret, then paste the secret to Cloudwork
[[File:Azure_13.png|1500px]]

← Older revision		Revision as of 07:31, 6 September 2023
Line 1:		Line 1:
		+	==What information gets synced in Azure -Users==
		+	*Primary Email(not updatable, is only synced upon user's first sync)
		+	*Other Email addresses
		+	*Name
		+	*Last Name
		+	*Username
		+	*SIS ID
		+	*Fax Number (will be synced through if their is an existing value in a Cloudwork User's Custom Attribute)
		+	*Department (will be synced through if their is an existing value in a Cloudwork User's Custom Attribute)
		+	*Business Phones (will be synced through if their is an existing value in a Cloudwork User's Custom Attribute)
		+	*Number of groups the synced user is apart of
		+
		+	==What information gets synced in Azure -Groups==
		+	*Group Friendly Name
		+	*Description
		+	*Number of users
		+	*Number of teachers
		+	*list of teachers
		+	*list of members
		+
		+	===What conditions need to be met before a group can be synced into Azure===
		+	Groups will be synced as long as:
		+	*In the '''Cloudwork Dashboard'''>'''External Domains'''>'''Azure Active Directory'''>domain>'''Domain settings'''>'''Maintain Groups''' is set to yes
		+	*In '''Cloudwork Dashboard'''>'''Groups'''>group you wanted synced to Azure>'''Edit group'''>'''Friendly Name'''
		+	*:'''Friendly Name''' has no special characters in its name
		+	*:'''In Group Types''', '''Synced to Azure''' is selected
		+
	==Instructions for setting up Azure Active Directory Connection==		==Instructions for setting up Azure Active Directory Connection==

@@ Line 26: / Line 26: @@
-Add the following permissions separately:
+Add the following permissions separately:<br>
 '''Delegated permissions'''
 *Application.Read.All

@@ Line 80: / Line 80: @@
 To renew the secret, head to '''Home''' > '''App registration'''<br>[[File:Azure_12.png|1500px]]
-Click on to the app used in Cloudwork, and head to Certificates & secrets, remove the expired secret and add a new secret, then paste the secret to Cloudwork<br>[[File:Azure_13.png|1500px]]
+Click on to the app used in Cloudwork, and head to '''Certificates & secrets''', remove the expired secret and add a new secret, then paste the secret to Cloudwork<br>[[File:Azure_13.png|1500px]]
 [[Category:Cloudwork Dashboard]]

@@ Line 13: / Line 13: @@
 Name the application and register.
-On the registered app page, click on '''Certificates and secrets'''
+On the registered app page, click on '''Certificates and secrets'''<br>[[File:Azure_4.png|1500px]]
-Add a new secret by clicking '''New Client Secret''' and save the secret value for future use.
+Add a new secret by clicking '''New Client Secret''' and save the secret value for future use.<br>[[File:Azure_5.png|1500px]]
-Click on '''API permissions'''
+Click on '''API permissions'''<br>[[File:Azure_6.png|1500px]]
-Add permission and select '''Microsoft Graph API'''
+Click '''Add a permission''' and select '''Microsoft Graph API'''<br>[[File:Azure_7.png|1500px]]
 Add the following permissions separately:
-*Delegated permissions
+'''Delegated permissions'''
 *Application.Read.All
 *Application.ReadWrite.All
@@ Line 51: / Line 47: @@
-Application permissions
+'''Application permissions'''
 *Application.Read.All
 *Application.ReadWrite.All
@@ Line 68: / Line 64: @@
 *User.ReadWrite.All
-Grant admin consent
+Grant admin consent by clicking '''Grant admin consent for Studentnet'''<br>[[File:Azure_8.png|1500px]]
-Permission granted
+Permission granted<br>[[File:Azure_9.png|1500px]]
-Head to '''Cloudwork dashboard'''>'''External Domains'''>'''Azure Active Directory'''>'''Add new'''
+If the secret is going to expire, there will be a warning message with the days to expire<br>[[File:Azure_11.png|1500px]]
-App Object ID - Object Id for the registered app<br>
+[[Category:Cloudwork Dashboard]]

Azure Active Directory Connection - Revision history

Dlim at 07:31, 6 September 2023

Dlim at 22:28, 15 March 2022

Dlim at 04:03, 15 March 2022

Dlim at 04:03, 15 March 2022

Dlim: Created page with "==Instructions for setting up Azure Active Directory Connection== Head to '''Azure Active Directory dashboard''', click on '''Manage Azure Active Directory'''File:Azure..."

Dlim: Created page with "==Instructions for setting up Azure Active Directory Connection== Head to '''Azure Active Directory dashboard''', click on '''Manage Azure Active Directory'''
File:Azure..."