Azure AD configuration guide

Register an application

Registering your application establishes a trust relationship between your app and the Microsoft identity platform. The trust is unidirectional: your app trusts the Microsoft identity platform, and not the other way around.

Follow these steps to create the app registration:

1. Sign in to the Azure portal.

2. If you have access to multiple tenants, use the Directories + subscriptions filter  in the top menu to switch to the tenant in which you want to register the application.

3. Search for and select Azure Active Directory.

4. Under Manage, select App registrations > New registration.

5. Enter a display Name for your application. We recommend: TimesitePro.

6. Specify who can use the application, sometimes called its sign-in audience. Please select the first option: Accounts in this organizational directory only.

   Supported account types	Description
   Accounts in this organizational directory only	Select this option if you're building an application for use only by users (or guests) in your tenant. Often called a line-of-business (LOB) application, this app is a single-tenant application in the Microsoft identity platform.
   Accounts in any organizational directory	Select this option if you want users in any Azure Active Directory (Azure AD) tenant to be able to use your application. This option is appropriate if, for example, you're building a software-as-a-service (SaaS) application that you intend to provide to multiple organizations. This type of app is known as a multitenant application in the Microsoft identity platform.
   Accounts in any organizational directory and personal Microsoft accounts	Select this option to target the widest set of customers. By selecting this option, you're registering a multitenant application that can also support users who have personal Microsoft accounts.
   Personal Microsoft accounts	Select this option if you're building an application only for users who have personal Microsoft accounts. Personal Microsoft accounts include Skype, Xbox, Live, and Hotmail accounts.

7. Don't enter anything for Redirect URI (optional). You'll configure a redirect URI in the next section.

8. Select Register to complete the initial app registration.

Finalise the configuration:

1. In the Azure portal, in App registrations, select TimesitePro.

2. Under Manage, select Authentication.

3. Ensure the ID Tokens check box is checked.

Add a platform:

1. Under Platform configurations, select Add a platform.

2. Under Configure platforms, select the tile called Web

   

    
3. Enter a Redirect URI for your app. This should be: https://app.timesitepro.com.au/YourSiteName/signin-oidc

4. Select Configure to complete your setup.

Timesite will need the following data, assuming your still logged into your portal.

1. Click on the Home link top left of your screen

2. Search for and select Azure Active Directory.

3. Select Overview, under Basic information note these values:- Primary Domain and Tennant ID
4. Select App registrations and select TimesitePro, under the Essentials section note you Application (Client) ID.

Send these three items to Support@timesitepro.com

NOTE:

This integration requires the users primary email address in azure to be the same as that in their Timesite Pro user profile.

We suggest you enable the system setting to disable mobile app access, if you enable this users will be able to use their mobiles providing they know their Timesite Pro user password.

Mobile apps can not use the users Azure AD credentials to log in.