Skip to content

Single Sign On Mechanisms

Cdhaldane edited this page May 17, 2021 · 2 revisions

Single sign-on button using Microsoft Azure to allow sign-in through Outlook/uOttawa emails.

How

  • Uses the Microsoft Authentication Library for Node.js (MSAL Node) with the authorization code flow.
  • Connects to a server port which redirects to the SSO, after successful login redirects back to the desired page.
  • Each user who completes the login gets an authentication code that gets saved, allowing one-time logins for returning users.

Needs

  • Serverport - being the URL of the "button".
  • Redirect-URI - being the homepage.
  • clientSecret - being the authentication code linked to the Microsoft Azure account. (24 months expiration on code)

Next Steps

  • To make useable with our webapp change the Needs to our webapps page URLs.

Server side

  • API to get
    • domain
    • clientID
    • redirectURI
    • onRedirectCallback
    • audience
  • Saves name, email, and picture which then can be saved to the database.

Github repository for the code template used

Clone this wiki locally