In general Single Sign On allows you to login or register with an external authentication system. The CitizenLab platform supports being a relying party for SSO using various technologies and identity providers.
Access to this feature depends on your plan.
How do I set up a Microsoft Entra integration?
Follow the steps described in the official documentation. Make sure the prerequisites (create an account and set up a tenant) mentioned on the page are satisfied first. Some additional remarks:
The Redirect URI should be of the format
https://<the.platform.domain>/auth/azureactivedirectory/callback, where<the.platform.domain>is replaced by the domain name of your CitizenLab platform (without 'https://').Make sure to enable the Access tokens (used for implicit flows) and ID tokens (used for implicit and hybrid flows) toggles. Alternatively, you can set the values of
oauth2AllowImplicitFlowandoauth2AllowIdTokenImplicitFlowboth totruein the manifest file (you canManifestfrom theManagesection in the sidebar in the screenshot). Both of these actions are equivalent.(should be present by default) API permissions should have “Microsoft Graph → User.Read”
Next, we need to get the following information from you to be able to set up you Azure client on our side:
The Directory (tenant) ID. The screenshot shows you where you can find this.
The Application (client) ID. The screenshot shows you where you can find this.
The Login Mechanism Name. This is the name shown next to the SSO option on the CitizenLab platform.
Send the ID's and the Login Mechanism Name to support through the chat button on the platform.