Enabling Azure AD Single-Sign-On

Before starting this task, ensure that you create an application registration. For details, see https://docs.microsoft.com/en-us/azure/active-directory/develop/howto-create-service-principal-portal. The user interface on Microsoft Azure is subject to change without notice.

Important:

You must first complete the following steps before enabling SSO.

Note:

If you want to enable SSO on more than one NAS, you must repeat all of these steps on each NAS.

Go to Control Panel > Privilege > Domain Security > SSO.
Select Enable Azure SSO Service.
Specify Client ID.

For details, visit https://docs.microsoft.com/en-us/azure/active-directory/develop/howto-create-service-principal-portal.

Note:
The Client ID is also known as an Application ID.
Specify Tenant ID.

For details, visit https://docs.microsoft.com/en-us/azure/active-directory/develop/howto-create-service-principal-portal.
Specify Reply URLs.
1. Sign in as an administrator at https://portal.azure.com/#home.
2. Click Azure Active Directory, and then click App registrations > Your app > All settings > Reply URLS.
3. Add :8080/cgi-bin to the end of the IP address.
4. Copy and paste the URL into the Reply URLs field label on the NAS.
Specify the Public key.
Note:
- The public key must be a PEM file.
- You can convert a CA certificate to a public key using a Linux environment or an OpenSSL.
Click Apply.

Note:
Your NAS login screen changes to include an Azure SSO login option.