How to use and set up Microsoft Azure SSO
Connect to Beetween with Microsoft
To connect to Beetween with Microsoft, first go to the Beetween connection page, then click on “Other connection options”. Choose “Connect with Microsoft”: a pop-up window will appear, allowing you to enter your Microsoft login details and connect to Beetween.
💡 When a user connects via Microsoft, Beetween stores the information directly in its cookies, enabling it to offer the connection via Microsoft directly to the user the next time.
Solving connection problems
If you're experiencing connection problems (Beetween home page not loading, error message...), the solution to these is certainly below. Let's take a look at the various requirements for a smooth connection via Microsoft.
Do you or your company administrator have access to the authentication settings?
To use authentication via Microsoft, this option must have been subscribed to in advance and configured at the same time as your Beetween accounts. If this is the case, you or your company administrator can access the “Authentication” page (Settings > Advanced settings > Authentication).
From this page, you can select “Microsoft login” as your connection mode. You can also “Allow login/password” as an additional option.
⚠️ Don't forget to select the “Company” scope in the railroad under the page title if you want the changes you're about to save to be applied to your entire company.
📌 The railway is organized as follows: Company > Agency > User.
Has the user's SSO login been entered correctly?
When creating a new user, you can enter the user's SSO login, i.e. his or her Microsoft identifier. If this field is not filled in correctly, the connection via Microsoft will not work. The error message “There is no user account on Beetween linked to these credentials” will be displayed.
You can modify the contents of this field at any time by going to Settings > Account configuration > Users and clicking on “Modify” in the menu in the “Actions” column of the table.
🚀 To go further...
What is Microsoft Azure SSO?
Microsoft Azure SSO is a feature that authenticates users to the Microsoft (Azure) Active Directory (AD).
Beetween uses the official Msal.js client (javascript authentication library supplied by Microsoft). Being in JS, there's no secret or key (the code is executed client-side). Beetween uses the “authorization code + PKCE” flow recommended by Microsoft.
This method requires the definition of a finite list of redirection URLs authorized to receive the authorization code. This code is required to generate an access_token/refresh_token pair. This method ensures that the Beetween application is the source of the token requests.
💡 Depending on the customer's AD settings, an authorization request will be sent to the administrator on first use.
The request then appears in the Azure management interface, under Enterprise Applications > Administrator Consent Requests. The administrator then simply authorizes the Beetween SSO application so that AD users with a Beetween account can authenticate via SSO.