Skip to main content

Setting up SSO on FileDirector Cloud

Symptoms​

You are a FileDirector subscriber and you would like to use Microsoft Azure Active Directory Accounts with SSO.

Cause​

n/a

Resolution​

  • `YOU put in a request for SSO be creating a new support ticket.
  • `WE will provided you with a call back URI for authentication.
  • `YOUfollow the steps below and then send us.Application (client) ID
  • Directory (tenant) ID
  • Client Secret value
  • `WE will tell you when SSO is ready to use. The full guide is available in the attached PDF documents.

2️⃣ MS Admin (Client) – Azure AD Configuration​

StepActionNotes / Dependency 4 Create the following Azure AD groups (can initially be empty):

  • fd-admins
  • fd-user
  • fd-user-named
  • fd-scan
  • fd-scan-namedThese groups control access levels and licence assignments within FileDirector. 5

Register a new app in Azure Portal → Azure Active Directory → App registrations → New registration

Use a clear name such as 'Efalia ECM SSO for Azure'.

6

Select 'Accounts in any organizational directory (Any Azure AD directory – Multitenant)'

Required for multi-tenant SSO.

7

Note the Application (client) ID and Directory (tenant) ID

FD Admin will use these later.

8

Add redirect URI under Authentication → Add a platform → Single-page application: https://{subdomain}.cloud.filedirector.co.uk/webclient/authentication/login-callback Enable Access tokens and ID tokens.

Must match the FD subdomain provided earlier.

9

Add API permissions under API permissions → Add a permission → Microsoft Graph → Application permissions:

  • Group.Read.All
  • GroupMember.Read.All
  • User.Read.All Then click 'Grant admin consent' to approve.

10

Create a Client Secret under Certificates & secrets → New client secret

Record the Value immediately; it will only be shown once.

11

Send the following to the FD Admin:

  • Application (client) ID
  • Directory (tenant) ID
  • Client Secret value FD Admin uses these to complete the SSO setup in FileDirector.