Azure AD Login

Azure AD (Active Directory) is a cloud-based identity and access management service provided by Microsoft Azure. Azure AD provides various features such as single sign-on, multi-factor authentication, role-based access control, self-service password reset, and more.

Business Value

Azure AD Login offers the admin of the Magento 2 store to integrate the Azure AD SSO login for the users of the Azure Active directory. Now, the users who want to create an account at the Magento store with their Azure AD credentials will be able to log in to the Magento 2 store and automatically create their customer accounts.

Account & Pricing

• The site owner must have an account in Azure Active Directory to create or invite the users to Azure AD.
• Azure AD provides 12 months of Free access and Pay as you go option for the site owner. For more details on what you get in free access and Pay as you go check the Active Directory page.
• The users must have an Azure AD account to do single sign-on on the Magento 2 web store.

Features

• The customers can log in with their Azure AD credentials with a single click after authenticating the account for the first time.
• The customers have to enter their Azure AD credentials only one time at the time of login.
• The customer can create their Magento 2 store account with a single click.

How does this extension Work?

Store Admin Workflow

Install and setup Azure AD App Credentials

After the successful installation of the extension, the admin will enter the details like - Application id, client secret, directory id, and the callback URL. The IDs and the client secret key is generated by creating an app on the Azure Active Directory side. 

The callback URL that you will set here should be the same as that of the app that you create at the Azure AD dashboard. For the callback URL just add the /azure/azure/Oauth to the end of your store URL.

e.g: https://example.com/azure/azure/Oauth

Customer Workflow

Azure AD Credentials

The users can log in to the Magento 2 store using their Azure AD credentials. Initially, they will register themselves on Azure AD using the invitation link or manually by the admin as required. 

Login With Azure Button

After that, the users on the Magento 2 store Sign in page can see the Login with Azure button. Tapping that up will redirect them for authentication at the Azure AD website. The user is asked to enter the OTP received on their registered email address.

Login After Authentication

After entering the OTP the user is registered as a customer at the Magento 2 store and can see his account panel options. Also, if the customer logs out of the customer account then he can log in again by tapping the Login with Azure button without the need of entering the credentials again.

Benefits

For Store Owner

• The admin can create users at the Azure AD console manually or invite them as required.
• Manage user accounts and permissions centrally.
• User management is simplified and can help reduce errors.

For Customers 

• The user needs to remember one set of login credentials.
• With SSO, users can log in to Magento 2 very quickly.
• No need to enter the Azure AD login credentials again.

Support Policy

• You get free 3 months of technical support included.
• You can buy a 6 or 12-month extended support agreement.
• For issues, please create a ticket or send an email to support@webkul.com
• Free lifetime updates of the module.