FlowWright can be configured to use one or more authentication providers for user authentication and login. The instructions below walk you through the steps to configure Office 365 single sign-on using OAuth.

Let's set up an Application in Azure.

Log in to the Microsoft Azure Portal. Once logged in, the UI should look as follows:

If you see “App Registration,” select it; otherwise, type “App Registrations” in the search box.  App Registrations should look as follows:

Click the “New registration” to create a new App registration.  Let's configure the details for the new application.

For the name, you can enter any name; we entered “FWOff365”. The next step is to configure the “return URL”. Since the FlowWright version being used to configure is localhost, the URL shows that.  You should configure your FlowWright server URL in the following format.  Remember also to use the app name at the end.

http(s)://<server url>/Login?authkey=<app name>

Click the “Register” button to create the App registration.  Once the App is made, it will render as follows:

Next, we will set up the credentials.  Click on the link “Add a certificate or secret”.  This screen will render as follows:

Click the “+ New client secret” button to create a new secret. Note: It's essential to copy and store the secret once it's made.  You will need this secret to configure the authentication connection in FlowWright. 

Provide a name for the secret and select its duration; in this case, it will be valid for 2 years. Once you click the “Add” button, the new secret will be created, as shown below:

Click the “Copy” icon next to the value column to copy the secret.  Copy this value and store it in Notepad++ or your favorite note-taking tool for later use.  App registration is now completed. Next steps will guide you through configuring this information in FlowWright.

Let's set up an Authentication Connection in FlowWright.

Log in to FlowWright and, using the left menu, navigate to Administration → Authentication. The screen will render as follows:

Click on the top menu and select Actions → Create.

The create dialog is displayed, as shown below:

For the name and auth key, provide the name of the App registration used in Azure → “FWOff365”.  Description is what you want to display in FlowWright's login UI.  You can also upload an icon for the authentication connection.  Next, select the provider from the drop-down and choose “ClsOAuthProvider” as the authentication provider.  

Once selected, many other authentication fields need to be configured.  

Fields “clientID” and “tenantID” are derived from the App registration as shown below:

Use the copy icon next to each ID to copy and paste the values into the FlowWright UI dialog.  

redirectUri - should be the same as what was configured in the App registration

scopes - scope should be set to User.Read

clientSecret - should be set to the copied secret from before

Next, configure endpoints; endpoints must be taken from the Azure App.

App endpoints have many endpoints, but only need the two oAuth endpoints as shown below:

Two more endpoints need to be configured:

logoutEndPoint - http://localhost:8080/Login?logout=

meEndpoint - https://graph.microsoft.com/v1.0/me

The completed configuration looks as follows:

Now that the configuration is completed, click the “Create” button to create the authentication connection.  Once created, the UI should display the newly created connection.

Now, let's configure this connection as one of the available login providers in the login UI.  By default, FlowWright ships with Forms authentication.  From the top menu, select Actions → Login UI Auth Connections.

The Login UI Auth Connections UI should render as follows:

From the “Select authentication connections” drop-down, select the newly created authentication connection “FW Office365”.

Once these are selected, log out of FlowWright to render the login UI.  The login UI should display as follows:

Office 365 Single Sign-On is now available on the login screen. Click the login link to navigate to the Microsoft Office 365 authentication site to perform authentication. Once authentication is successful, it will automatically redirect to FlowWright and open the FlowWright application UI—the default dashboard.

When you click the “FW Office365,” you may see a Microsoft dialog as shown below for authentication:

For the above to work successfully, make sure the user is created and active in FlowWright and has the same username as in Office 365, typically your organization's email address.

Note: We have removed this App registration from Azure. Please don't use the configuration information from here; use yours instead.