Register the Open edX Instance with Azure Active Directory
You can use Azure Active Directory to allow users with Microsoft Office 365 Business accounts to sign in to Open edX. Note that this feature currently does not work with other types of Microsoft accounts (such as “@live.com” or “@hotmail.com” accounts).
If you do not have a Microsoft account, create one on the Microsoft sign in page.
If you do not have an Azure subscription, create one on the Azure account creation page.
Note
You must enter a credit card on this page, but if you do not create any virtual machines or other services besides Azure AD, you will not be charged.
Go to the Azure sign in page.
Click New, locate Active Directory, and then select Create.
Enter a name, domain name, and country.
Create the new application.
- Find the new Active Directory in the portal, select Applications, select Add, and then select Add an application my organization is developing.
- Enter a name for the app, and then select Web Application.
- For Sign-on URL, enter
<LMS URI>/auth/complete/azuread-oauth2/
. For example, you might enterhttp://localhost:8000/auth/complete/azuread-oauth2/
. - For App ID URL, enter
<LMS URI>/sign in
. For example, you might enterhttp://localhost:8000/sign in
. - Finish creating the new app.
In the portal, locate your Azure AD application, click Configure, and then locate and make a note of the client ID. For example, the client ID may be
fe3c3868-0faa-44ee-a1bf-1110aeab1a65
.In the Keys section, select a two-year duration, and then select Save to create a secret key. Note the value of the key. For example, the key value may be
abcdef12341yHlmOrR8D3vlV1cD2VtL7k9xk9DSB8vw=
.In the Permissions to other applications section, locate the Delegated Permissions option for Windows Azure Active Directory, and then select Sign in and read user profile.
Verify the Azure AD domain name. To do this, follow these steps.
- In the portal, locate the new Active Directory.
- Select Domains, select Add, and then add the root domain you want to use (for example,
edx.org
). Make sure that you add the root domain first, and then follow the TXT record verification process. - (optional) After the domain has been verified, add subdomains (for example,
courses.edx.org
). Subdomains also request verification, but do not need it.
In the Active Directory, select Applications, and then select the application that you created.
Enable multi-tenant support.
Comments
Post a Comment