Microsoft Azure Integration
- Gabrielle Pollack
Overview
Microsoft Azure is a cloud computing platform designed by Microsoft to successfully build, deploy, and manage applications and services through a global network of data centers. Integrating Microsoft Azure with the XMP allows you to:
enable users in the account to log in to the XMP using single sign-on (SSO) with their Microsoft credentials
create, update, and deactivate users in the hierarchy automatically using Azure Webhooks.
Prerequisites for Integrating with Microsoft Azure
Before Azure credentials can be used for SSO or hierarchy updates with an Account in Experience.com, an administrator with access to the organization’s Azure business account must have Account Manager or Organization Manager access in the XMP.
Configure the Integration
Follow these steps to configure Azure for an Account and allow users to utilize the SSO option:
Create a new Microsoft Azure Connection in the Account’s setup.
To create a new configuration, navigate to the Account Settings page and open the Ingestion Settings. Click Azure, and then click the blue New Connection button.
On the configuration menu that expands from the right side of the page, toggle ON the setting Connect Azure Active Directory.
When toggling this on, a confirmation will appear. This message informs you that an active Azure connection will begin hierarchy data ingestion and is a more important reminder to disable the connection. Click Yes.
When the Connect Azure Active Directory setting is toggled ON, click the blue Continue button.
Enter valid Microsoft administrator login credentials into the Microsoft login page.
Upon initial login to the Azure business account from the XMP, Microsoft will request permission for application access. Enter a justification (i.e., 'enabling SSO', or 'automating hierarchy changes') then click the Request approval button.
After approving, your screen may display a message that states the request has been sent. In the next steps, you will log back into the Azure account to approve the request.
Go to https://azure.microsoft.com/en-us/ and sign in to the Azure business account again.
Once logged in to Azure as an administrator, locate the Admin consent requests within the Account Activity menu.
The request you just submitted from Experience.com should be on this page.
When the request details expand from the right side of the page, click Review Permissions and Consent.
You might be asked to log in one more time. Enter your account credentials on the page and click Next.
On the next screen, you will be asked to review the permissions that had just been requested via Experience.com. Click the blue Accept button.
Once the permissions have been accepted via Microsoft Azure, you will be redirected back to the XMP, where details about the newly established Microsoft Azure connection are displayed. You may exit from this menu as the connection has been established and activated.
Active Microsoft Azure Connections
When the Azure connection is established and activated, new users created within the integrated Azure Directory will be automatically added to the XMP with single sign-on capabilities. Existing users within the account will also be able to log in using SSO if their email address in the XMP matches the email address associated with their profile in Microsoft Azure.
Potential Errors when Configuring the Microsoft Azure Connection
none at this time.