Azure - Single Sign-On Configuration Guide

Prev Next

Overview

TechnoMile's is a powerful solution built for government contractors to streamline federal data management and reporting, and gain more actionable intel. GovSearchAI does this by centralizing real-time Federal data directly from sources such as USASpending, Federal Procurement Data System (FPDS), and . Upon installation, GovSearchAI data and functionality from these sources are available on multiple objects within your CRM org, including Accounts, Contacts, and Opportunities.

NOTE

This guide is intended for administrators configuring Single Sign-On from their organization to GovSearchAI.  

Audience

  • Microsoft Entra Administrators

  • IT Support

Prerequisites

  • Ensure that the user has Azure Entra (Formerly Active Directory/AD).

  • User should be logged in with an administrative account (such as Cloud Application Administrator).

  • Open a ticket with TechnoMile Customer Success or Email Support representative for details necessary for this process such as Redirect URL.

  • Have a notepad window open to copy and paste details during setup.

OpenID Connect (OIDC) with Azure Entra (Active Directory/AD)

OpenID Connect (OIDC) is a common identity protocol that enables authentication between systems. TechnoMile's Platform supports this for user registration and login processes from Microsoft Entra.  The Ribbon Workbench allows you to customize the command bar and ribbon UI by adding buttons, commands, and actions.

NOTE

This guide does not address the topic of how to create a JavaScript web resource or custom action to execute when the button is clicked, nor does it explain how to set Enable Rules and Display Rules to control button visibility.

The following steps outline the process to add an Ingest Mod button using the Ribbon workbench:

  1. Sign in to the Microsoft Entra admin center as at least a Cloud Application Administrator.

  2. Browse to Manage > App Registrations > Enterprise applications > New Registration

  3. Name the application

  4. In the Redirect URI section, select Web as the platform, and specify the Redirect URI provided by TechnoMile Support.

  5. Click Register.

  6. Once the App Registration is created, copy the Application (client) ID from the Overview page and paste into your notepad

  7. Navigate to Manage > Certificates & Secrets.

  8. Click New Client Secret.

  9. Copy the Secret Value before closing the screen and store in a password manager.  Paste into your notepad temporarily as well.

    NOTE

    The expiration date should be maintained and renewed as needed as expiration will prevent users from accessing the system.

  10. Navigate to Token Configuration.
    Click Add optional claim and add email, family_name, and given_name.

  11. Navigate to API Permissions.
    Click Add a Permission and select Microsoft Graph.

  12. Add email, openid, Profile, and user.read.

  13. Click Grant admin consent for .

  14. Navigate to Overview.
    Click Endpoints.

  15. Find OpenID Connect metadata document URL and copy into notepad.  For example: https://login.microsoftonline.com/xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxxxx/v2.0/.well-known/openid-configuration

  16. Navigate back to Home > Enterprise Applications, find Application Name corresponding to App Registration.

  17. Navigate to Manage > Properties, review properties for who can access this application.  

    NOTE

    If Assignment Required = True, then add Users/Groups that should have access to this application to the Manage > User and Groups.

    Users added to this list will be given access to the TechnoMile Platform if they attempt to access the TechnoMile Platform page.

  18. Reach out to your TechnoMile Support Representative and provide the Client ID, Client Secret, and OpenID Connect metadata document URL.

  19. After the TechnoMile Support team receives the details, the configuration will be applied, and the corresponding button will display to users on the TechnoMile Platform Login Screen as below:

SAML Configuration with Microsoft Azure

Coming Soon!