> For the complete documentation index, see [llms.txt](https://docs.nanocorp.ai/n.scope-v2.0-english/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://docs.nanocorp.ai/n.scope-v2.0-english/ressources/integrations/single-sign-on/azure-ad-sso.md).

# Azure AD SSO

## n.Scope Azure SSO Feature

## 1. Configuring SSO

### 1.1 Pre-Requisites

To successfully configure Azure SSO integration with n.Scope, the following pre-requisites must be dealt with :

* [ ] The n.Scope platform must be able to communicate with Azure Servers
* [ ] An Azure Application must be created following Nano Corp instructions.

### 1.2 Configuring Azure SSO

Follow these steps to integrate n.Scope with Azure SSO.

#### 1.2.1 Retrieve Azure SSO Applications details

Retrieve the Application ID & Tenant ID from the Azure AD application page.

<figure><img src="https://1098880104-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FnKF8sUpjnIxYkqRC9Q3u%2Fuploads%2FCUKZ4gpVJcBPBMhczNmu%2FCleanShot_2023-07-24_at_11.26.512x.png?alt=media&amp;token=935537db-e79d-42d5-9468-9b4883192c0d" alt=""><figcaption></figcaption></figure>

Note that information aside as they will be required later.

#### 1.2.2 Configure Single Page Application Callback

n.Scope requires a SPA callback from Azure SSO. Create one from Azure SSO

<figure><img src="https://1098880104-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FnKF8sUpjnIxYkqRC9Q3u%2Fuploads%2FiWQ8XjIzAnK4mBKvqYqs%2FCleanShot_2023-07-24_at_11.28.412x.png?alt=media&amp;token=e7709c82-0954-49e1-bca1-2a70483f4cb8" alt=""><figcaption></figcaption></figure>

Set the redirect URI for the callback to the IP address or FQDN of the n.Scope deployed on your network, on the `/ssoazure` path.

{% hint style="info" %}
Example Callback URI: \`https\://{N.SCOPE IP ADDRESS}/ssoazure\`
{% endhint %}

Set the logout URL to the `/api/logout_sso` path.

{% hint style="info" %}
&#x20;Example Logout URI: \`https\://{N.SCOPE IP ADDRESS}/api/logout\_sso\`
{% endhint %}

Check the API permissions parameters. The following permissions must be granted:

* [ ] email
* [ ] offline\_access
* [ ] OpenID
* [ ] profile
* [ ] User.Read
* [ ] User.ReadBasic.All

<figure><img src="https://1098880104-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FnKF8sUpjnIxYkqRC9Q3u%2Fuploads%2F2ya5emGL1L2pNjlOobgs%2FCleanShot_2023-07-24_at_11.35.472x.png?alt=media&amp;token=193cc277-3b9c-4afb-8fce-cef8328c1317" alt=""><figcaption></figcaption></figure>

### 1.3 Configuring n.Scope for Azure SSO

This section will detail the steps required to enable Azure SSO on n.Scope.

#### 1.3.1 Activate Azure SSO

Connect to n.Scope using the default admin login and password (admin/admin).

⚠️ You will be required to change the admin password on the first login, don’t forget to write down the updated password.

Navigate to n.Scope configuration from the left navigation menu:

<figure><img src="https://1098880104-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FnKF8sUpjnIxYkqRC9Q3u%2Fuploads%2FrFSnpeZW0MiMeFb5pgn6%2FCleanShot_2023-07-24_at_11.37.202x.png?alt=media&amp;token=17765c9c-7bd5-4817-b004-b522930a2d20" alt="" width="375"><figcaption></figcaption></figure>

Select the Single Sign-On tab:

<figure><img src="https://1098880104-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FnKF8sUpjnIxYkqRC9Q3u%2Fuploads%2F7tV3HkhXZvPIqNyMokWV%2FCleanShot_2023-07-24_at_11.38.442x.png?alt=media&amp;token=88e3e4b6-84fc-4d3c-95cb-a4e71bf27a35" alt=""><figcaption></figcaption></figure>

Register the SSO service by selecting Azure and providing the Application ID & Tenant ID you noted from the first step.

<figure><img src="https://1098880104-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FnKF8sUpjnIxYkqRC9Q3u%2Fuploads%2F5SV1r0KD2RdKQ6mmvunj%2FCleanShot_2023-07-24_at_11.40.072x.png?alt=media&amp;token=e9221be5-a83e-4c86-b776-e7c54a5f2392" alt=""><figcaption></figcaption></figure>

Click on the + Add button to register the SSO service.

{% hint style="info" %}
You can give any meaningful name you wish to this SSO integration (we recommend Azure SSO)
{% endhint %}