Microsoft Azure Active Directory

Configure Microsoft Azure as SSO for CrushBank

Register your app with AD Azure

1. https://docs.microsoft.com/en-us/azure/active-directory/develop/quickstart-register-app
2. Redirect URI
   1. Standalone CrushBank
      1. https://login.crushbank.com/login/callback

1. 1. CrushBank within ConnectWise Manage (Pod)
      1. https://connectwiselogin.crushbank.com/login/callback
2. Create a client secret and copy your Client ID and Client Secret Value as you will need to provide it to CrushBank. 
   1. Application (Client) ID is found under Overview
      
      
   2. Client Secret Value is found under Certificates & Secrets
      

Configure Permissions

1. https://docs.microsoft.com/en-us/azure/active-directory/develop/quickstart-configure-app-access-web-apis#add-permissions-to-access-web-apis
2. Configure permissions for Microsoft Graph API.
   1. Users > User.Read
   2. Directory > Directory.Read.All

Create Support Ticket with CrushBank

1. Send an email to support@crushbank.com with subject "New SSO Connection". Please include the following in the email.
   
   1. Client ID
   2. Client Secret - *Make sure you provide the client secret value not the client secret id
   3. Microsoft Azure AD Domain
2. Once we process your ticket and setup the connection on our side, we will setup a call with you to walk through the SSO integration and test.