Setting up SSO on FileDirector Cloud

Created by Jeremy Burgess, Modified on Tue, 21 Oct at 3:13 PM by Jeremy Burgess

Symptoms

You are a FileDirector subscriber and you would like to use Microsoft Azure Active Directory Accounts with SSO.

n/a

YOU put in a request for SSO be creating a new support ticket.
WE will provided you with a call back URI for authentication.
YOUfollow the steps below and then send us.
- Application (client) ID
- Directory (tenant) ID
- Client Secret value
WE will tell you when SSO is ready to use.

The full guide is available in the attached PDF documents.

Step	Action	Notes / Dependency
4	Create the following Azure AD groups (can initially be empty): fd-admins fd-user fd-user-named fd-scan fd-scan-named	These groups control access levels and licence assignments within FileDirector.
5	Register a new app in Azure Portal → Azure Active Directory → App registrations → New registration	Use a clear name such as 'Efalia ECM SSO for Azure'.
6	Select 'Accounts in any organizational directory (Any Azure AD directory – Multitenant)'	Required for multi-tenant SSO.
7	Note the Application (client) ID and Directory (tenant) ID	FD Admin will use these later.
8	Add redirect URI under Authentication → Add a platform → Single-page application: https://{subdomain}.cloud.filedirector.co.uk/webclient/authentication/login-callback Enable Access tokens and ID tokens.	Must match the FD subdomain provided earlier.
9	Add API permissions under API permissions → Add a permission → Microsoft Graph → Application permissions: Group.Read.All GroupMember.Read.All User.Read.All	Then click 'Grant admin consent' to approve.
10	Create a Client Secret under Certificates & secrets → New client secret	Record the Value immediately; it will only be shown once.
11	Send the following to the FD Admin: Application (client) ID Directory (tenant) ID Client Secret value	FD Admin uses these to complete the SSO setup in FileDirector.

Attachments (2)

Quick_Guide_SSO.pdf
812 KB

Azure AD SSO....pdf
224 KB