Page History

If you have licensed the AAD add-on from iRely then you need to do the following to get it working on your instance of i21. Below are the 4 steps to setup configure your Azure Active Directory (AAD) to work with i21.

Step 1 - Create an i21 Azure Group (role)

...

1. Log into your Azure Active Directory
   1. https://portal.azure.com/ 
   2. Image Modified
2. Click Groups
   1. Image RemovedImage Added
3. Click New group
   1. Image Modified
4. Enter the following for the New Group:
   1. Group type = Securityunmigrated-wiki-markup

   2. Group

      name

      =

      *

      i21:

      \

      [i21UserRole

      \

      ]

      *unmigrated-wiki-markup
      1. Replace *\ [i21UserRole\] * with any roles from i21. E.g.  {*}i21:PETRO ADMIN{*}. Anything after "i21:" will be the role of the users in this group.
   3. Group description = The group descriptionEnter any description you want for this group.
   4. Membership type = Assigned
   5. Under Members, click No members selected hyperlink then add members/users.
   6. Click Create
   7. Image Modified

Step 2- App Registration

1. Go to Azure Active Directory
2. Click App registrations then New registration
   1. 
3. In the Register an application form, enter the following:
   1. Name = iRely i21
   2. Supported account types = Accounts in this organizational directory only (single tenant)
   3. Redirect URI (web) = The URL of the i21 plus identityserver/.
      1. E.g. https://helpdesk.irely.com/identityserver/
   4. Click Register
   5. 
4. Go back to App registrations and select the app that you have just created (iRely i21)
5. Click Certificates & secrets and create a Secret
   1. Image Modified
   2. Copy the secret value and save it locally.
6. Under API permissions, verify that the following are present especially those underlined ones. If not, add those permissions.
   1. Image Modified

Step 3 - Send the following details to iRely

1. Goto Go to Azure Active Directory
2. Select App registrations and select iRely i21 from the list.
   1. Image Added
3. Copy the following values from the iRely i21 appthe Overview and Certificates & secrets section and provide them to iRely in your help desk ticket.
   1. Application (client) ID
   2. Directory (tenant) ID
   3. Secret
   4. Image Added
   5. Image Removed
   6. Image Removed
   7. Image Removed
   8. Image Removed

Step 4 - Mapping existing i21 users to Azure Active Directory users

...