By logging in using Azure AD Sign-On (SSO), users no longer have to select and remember a local password - your users are logged in via your Azure AD credentials.

Azure AD SSO is a paid add-on to your current Cinode plan.

Preparations

First off, you will need to contact Cinode support to make sure the add-on is enabled for your company. You will also need an Administrator permission level to set up the integration in-app.

Get started

Login into Cinode as usual.

  1. Go to the link Administration in the sidebar and select Integrations:

2. On the Integrations page, select the tab Account types.

3. Click the button Activate new account type:

4. Select "Aad" as the account type in the dropdown menu and click Save.

5. Azure AD (Aad) will now be displayed as an added account type:

How to set up Azure AD SSO for your users

After you have enabled Azure AD SSO as a method of logging into Cinode, you will need enable SSO for each individual user. This is done by adding the unique user identifier (Object ID) from your Active Directory to each user account in Cinode.

Once you have retrieved the Object ID for all your user from your Azure Active Directory, you can proceed.

  1. Go to the link Administration in the sidebar and select Users:

2. Click the options menu, indicated by the three vertical dots on a user:

3. Select Edit login type:

4. Finally, add the unique ObjectID that you retrieved from Azure AD related to the specific user in the "Object Identifier" field:

This process will need to be repeated for each individual user that is going to login via SSO.

Done!

Read more about building a SCIM endpoint and configure user provisioning with Azure AD

Please note

  • A user cannot log in with both Azure AD SSO and the password account types. You will have to select one of them.

  • It is possible to have some users logging in via SSO and some via password. In that case, you will need both Aad and Password added as account types, but for those users who are meant to login via SSO you will also need to add an Object ID.

Did this answer your question?