Aware 2.0- Azure AD SSO

This article contains information on setting up Microsoft Azure Active Directory as the SSO for Aware, including step-by-step registration instructions and details on providing the Application ID, Client Secret, and AAD Domain to complete the integration.

Follow these steps to set up Microsoft Azure Active Directory as the Single Sign-On (SSO) solution for your Aware environment and users. To begin, Aware must be registered in the Microsoft Azure Management portal.

To complete the SSO integration for Aware, the customer must provide the following information:

• Application (Client) ID.
• Client Secret.
• AAD Domain.

1. Register Aware in Azure Active Directory: Complete the steps required for adding Aware to customer's Azure Active Directory.
2. Log into your Azure Management Portal.
3. Go To Azure Active Directory > App registrations > New registration.
4. In the Register an application:

• Name: Aware.
• Supported account types: Accounts in this organizational directory only.
• Redirect URL: https://wiretap-prod.auth0.com/login/callback

5. Enter the Overview page for the Aware app | copy Application (Client) ID.

6. Go to API Permissions | Add a permission | Microsoft Graph.

7. Select Delegated Permissions.
8. Expand Directory | check Directory.Read.All permission | Update permissions.

9. Click Grant admin consent for Azure Tenant.
10. Verify new permission has been granted.

11. Configure Secret - Go to Certificates & secrets | New client secret.

12. In the Add a client secret window:

• Name: Aware Azure AD Key.
• Expires: Never (recommended).

13. Click Add | Copy Secret value.

It is preferable not to establish an expiration period for the client secret in order to prevent any service interruptions. Customers have the ability to update the secret for the Aware application within Azure Active Directory at any time. Please reach out to your Aware customer success manager to ensure that Aware is configured with an updated secret.

14. Contact you Customer Success Manager with the following information:

• Application (Client) ID.
• Client Secret.
• AAD Domain.

You will be notified shortly when the SSO for your Aware tenant is configured with the information provided.