FlowWright can be configured to use one or more authentication providers for user authentication and login. The instructions below walk you through configuring Office 365 single sign-on using OAuth.

Let's set up an Application in Azure.

Log in to the Microsoft Azure Portal. Once logged in, the UI should appear as follows:

If you see “App Registration,” select it; otherwise, type “App Registrations” in the search box. App Registrations should appear as follows:

Click “New registration” to create a new app registration. Let's configure the details for the new application.

For the name, you can enter any name; we entered “FWOff365”. The next step is to configure the “return URL”. Since the FlowWright version being used is localhost, the URL reflects that. You should configure your FlowWright server URL in the following format. Also remember to include the app name at the end.

http(s)://<server url>/Login?authkey=<app name>

Click the “Register” button to create the App registration. Once the App is created, it will appear as follows:

Next, we will set up the credentials. Click the “Add a certificate or secret” link. This screen will appear as follows:

Click the “+ New client secret” button to create a new secret. Note: Copy and store the secret once it's created.  You will need this secret to configure the authentication connection in FlowWright. 

Provide a name for the secret and select its duration; in this case, it will be valid for 2 years. Once you click the “Add” button, the new secret will be created, as shown below.

Click the “Copy” icon next to the value column to copy the secret.  Copy this value and store it in Notepad++ or your preferred note-taking tool for later use.  App registration is now complete.  Next steps will guide you through configuring this information in FlowWright.

Let's set up an Authentication Connection in FlowWright.

Log in to FlowWright, then use the left menu to navigate to “Administration > Authentication”. The screen will appear as follows:

Click the top menu, then select “Actions > Create”.

The Create dialog is displayed, as shown below:

For the name and auth key, enter the name of the Azure App registration used in Azure > “FWOff365”. The description is what you want to display in FlowWright's login UI. You can also upload an icon for the authentication connection. Next, select the provider from the drop-down and choose “ClsOAuthProvider” as the authentication provider.  

Once selected, you'll need to configure several additional authentication fields.  

Fields “clientID” and “tenantID” are derived from the App registration, as shown below:

Use the copy icon next to each ID to copy the values and paste them into the FlowWright UI dialog.  

• redirectUri - should match what was configured in the App registration
• scopes - scope should be set to User.Read
• clientSecret - should be set to the previously copied secret

Next, configure endpoints; use the endpoints from the Azure App.

The app has many endpoints, but only the two OAuth endpoints shown below are needed:

Two additional endpoints need to be configured:

• logoutEndPoint - http://localhost:8080/Login?logout=
• meEndpoint - https://graph.microsoft.com/v1.0/me

The completed configuration appears as follows:

Now that the configuration is complete, click the “Create” button to create the authentication connection. Once created, the UI should display the new connection.

Now, let's configure this connection as one of the available login providers in the login UI. By default, FlowWright ships with Forms authentication. From the top menu, select “Actions > Login UI Auth Connections”.

The Login UI and Auth Connections UI should render as follows:

From the “Select authentication connections” drop-down, select the newly created “FW Office365” authentication connection.

Once these are selected, log out of FlowWright to display the login UI.  The login UI should appear as follows:

Office 365 Single Sign-On is now available on the login screen. Click the login link to navigate to the Microsoft Office 365 authentication site to sign in. Once authentication is successful, it will automatically redirect to FlowWright and open the FlowWright application UI—the default dashboard.

When you click “FW Office365,” you may see a Microsoft authentication dialog as shown below:

For this to work, ensure the user is created and active in FlowWright and has the same username as in Office 365, typically your organization's email address.

Note: We have removed this App registration from Azure. Please don't use the configuration information here; use yours instead.