Microsoft Azure

Every venue has different needs and the primary advaIntegrating Microsoft Azure as a login option offers numerous advantages, including enhanced security, compliance, and seamless integration with the Microsoft ecosystem, making it a valuable choice for businesses looking to improve their authentication infrastructure.

Creating the App

Client ID

To create an application, you need to register or log in using the following URL: https://portal.azure.com/#home

Step 1

Click on App registrations. If you cannot find this option, click More Services, search for App registrations, and then press it.

Step 2

Click on + New Registration
Enter the name you wish to use for the App.
You can select any account.

Step 3

Under Redirect URL; select Web, and the URL should be as follows: https://YOUR-PLATFORM/social/customoauth1login.php
Once completed, click the Register button to save your entries.

Step 4

Copy the Application (client) ID, for example, b4ee41b0-8f58-440f-9427-xxxxxxxxxxxxx.
You will need it to paste into your HSNM > External Authentication > OAuth Custom Authentication page.

Client Secret

At this point, you need to generate the Secret ID by following these steps:

Step 1

From the same page, click on Certificates & Secret
Then click on + New Client Secret

Step 2

You will be displayed a pop up. You need to fill in the description and expiry time:

Step 3

Click Add to generate the key.

Important! You need to copy the Value as a secret ID and paste it in the HSNM > External Authentication > OAuth Custom Authentication page, not the secret ID

Step 4

Now select Branding on the left-side menu.
Then add the Home page URL as https://YOUR-PLATFORM.com
Terms of service URL as https://YOUR-PLATFORM/terms.php?id=ID&lang=en where ID is your Manager ID
Privacy of service URL as https://YOUR-PLATFORM/privacy.php?id=ID&lang=en where ID is your Manager IDnerate the key.

Entering the Parameters into your HSNM

Now access your HSNM platform to configure Microsoft Azure. Expand External Authentication > OAuth Custom Authentication.

Procedure

Enter the details as follows:

Client ID – Enter the Application (client) ID
Client Secret – Enter the Secret Value
OAuth Version – Enter 2.0
URL to Require the Initial Token – Enter https://login.microsoftonline.com/common/oauth2/v2.0/token
URL to Require the URL of the Access Token – Enter https://login.microsoftonline.com/common/oauth2/v2.0/token
Access Token Type – Enter Bearer
URL of the Redirect Server – Enter https://login.microsoftonline.com/common/oauth2/v2.0/authorize?response_type=code&client_id={CLIENT_ID}&redirect_uri={REDIRECT_URI}&scope={SCOPE}&nonce={NONCE}&state={STATE}
HTTP Method to Request Access Token – Select POST
HTTP Method that Returns Access Token – Select GET
OAuth Parameters Passed through HTTP Authorization – Tick Yes
Required Permissions to the OAuth Server – Edit User.ReadBasic.All
URL of the API that Returns the User’s Data – https://graph.microsoft.com/v1.0/me
Parameters passed in the URL – Tick No
Name of the Variable that Contains the Username – Enter userPrincipalName
Name of the Variable that Contains the First Name – Enter givenName
Name of the Variable that Contains the Last Name – Enter surname
Name of the Variable that Contains the Email Address – Enter mail
Select the colours you want for the background and text.
Then upload the image you want to display to users, identifying the Azure login

Click Save in the top right corner of the page. Your selected entries are saved.

Walled Garden

To finish the configuration and allow the login, add the following relevant Walled Garden into your gateway. In addition to the ones already present, add them one by one to the Walled Garden/White List page.

*login.microsoftonline.com*
*.msidentity.com*
*.trafficmanager.net*
*.msftauth.net*
login.live.com*
*akadns.net*
*.omegacdn.net*

For MikroTik Only

Enter the relevant Walled Garden into the Walled Garden page by selecting it from the context menu.
Click the + button to add them one by one.