Configuring Single Sign-On (SSO) with Azure AD

Active Directory (AD) now known as Microsoft Entra ID is a database and set of services that connect users with the network resources they need to get their work done. The database (or directory) contains critical information about your environment, including what users and computers there are and who’s allowed to do what. For example, the database might list 100 user accounts with details like each person’s job title, phone number and password. It will also record their permissions.

It's important to understand clearly what is Azure Active Directory and why it is used? Azure Active Directory (Azure AD) is Microsoft’s enterprise cloud-based identity and access management (IAM) solution. Azure AD is the backbone of the Office 365 system, and it can sync with on-premise Active Directory and provide authentication to other cloud-based systems via OAuth.

Key features of Azure Active Directory

Single Sign-on Prerequisites:

The following prerequisite steps on Microsoft Azure AD must be completed before you can configure single sign-on on the system:

• Create a subscription for Microsoft Azure AD. A free trial subscription is also available. For more information, see Azure Active Directory (Azure AD). During subscription creation, you specify a tenant that is used to create a URL to access the Microsoft Azure AD dashboard
• Access the Microsoft Azure AD administrator dashboard on the Azure AAD portal now known as Microsoft Entra ID.
• Make sure you have the Microsoft Entra Connect tool set at your domain controller server and it's syncing to the cloud. For help in setting up look into this article.
• Ensure administrative access to both the on-premise server and Azure AD Cloud. To configure the on-premise active directory look into this article

• Install the Azure AD connect tool (now know as Microsoft Entra Connect) in your pc for proper seamless connection with admin access.

• Go to Change user sign-in > Enter username & password of your Azure ID > Enable Single-sign on and click Enter Credentials.

• Next you'll need to enter domain administrator credentials to configure on premise forest

• Enter Start Sync-process when configuration completes.

Finally, go back to azure portal page > Microsoft entra connect > Connect Sync to check the status of seamless single sign on.

Once, Single -Seamless sign on gets enabled it will create a Computer account (AZUREADSSOACC) on your windows server showing that its configured properly on your pc.