SSO: Azure Active Directory B2C

These steps enable you to integrate Azure Active Directory (AD) B2C using OpenID. Azure AD B2C allows you to use social providers such as Google, Facebook, and your organization's email for single sign-on (SSO).

To set up Azure Active Directory B2C with SmarterU:

1. Complete the following steps in Azure:
   1. Create a B2C tenant.
   2. Register a new application.
   3. Create a sign-in user flow.
   4. Create an identity provider.
   5. Determine the application ID and issuer.
2. Configure Azure AD B2C OpenID in SmarterU.

Creating a B2C Tenant in Azure

To create a B2C tenant in Azure, follow the steps detailed here: https://docs.microsoft.com/en-us/azure/active-directory-b2c/tutorial-create-tenant.

NEXT STEP: Register a new application.

Registering a New Application in Azure

To register a new application in Azure, follow the steps detailed here: https://docs.microsoft.com/en-us/azure/active-directory-b2c/tutorial-register-applications?tabs=applications.

In step 7, use the following address as the endpoint:

https://integrations.smarteru.com/Integrations/ADB2C/

This endpoint was created to handle requests and will be used for authentication before logging users into SmarterU.

NEXT STEP: Create a sign-in user flow.

Creating a Sign-In User Flow

To create a sign-in user flow in Azure, follow the steps detailed here: https://docs.microsoft.com/en-us/azure/active-directory-b2c/tutorial-create-user-flows.

In step 8 of the Create a Sign-Up and Sign-In User Flow section, check the following attributes and claims:

NEXT STEP: Create an identity provider.

Creating an Identify Provider

To create the identity provider in Azure, follow the steps detailed here: https://docs.microsoft.com/en-us/azure/active-directory-b2c/identity-provider-generic-openid-connect. 

You'll need to have the client ID and secret key from the Registering a New Application in Azure section.

NEXT STEP: Determine the application ID and issuer.

Determining the Application ID and Issuer

In this part of the process you'll determine the application ID and issuer that are needed in the next section (i.e., Configuring Azure AD B2C in SmarterU).

To determine the application identifier and issuer in Azure:

1. From the Home > Azure AD B2C page, select Applications. The application ID displays in the right panel. 

2. From the Home > Azure AD B2C page, select User Flows.
3. Select the sign-in user flow that you created in the Creating a Sign-In User Flow section.
4. Click Run User Flow.

A panel displays on the right.

5. Click the link that's displayed at the top of the panel. 

The issuer displays.

NEXT STEP: Configure Azure AD B2C in SmarterU.

Configuring Azure AD B2C in SmarterU

To set up Azure Active Directory with SmarterU:

1. Enable external authorization for your SmarterU account.
2. Select Enable External Authorization.
3. Expand the Azure AD B2C OpenID section.

3. Specify the following settings:

4. Click Save.

Troubleshooting

If your users are having trouble logging in, refer to our Troubleshooting User Accounts page for common issues.