Tanda supports single sign-on with Microsoft Azure AD. To configure this in Tanda, first, head to the integrations page (Settings > Integrations).
The following steps will assist in setting up the integration in Azure AD. The relevant information and settings needed throughout this process can be found by navigating to Settings > Integrations > Single Sign On > New SSO Setting > Azure.
To configure the integration, have your app administrator (or higher) navigate to the app registrations page in the Azure portal. To find this, you can search for ‘app registration’ in the global search bar.
If you haven't configured Tanda yet, click new registration. If you've already completed this, skip to step 7.
In the new app registration page enter the app name as 'Tanda', or whatever makes most sense for your business. S
Choose the supported account types for the AUTHENTICATION (this is also how you also set up your Azure AD to auth users into Tanda from your AD)
Locate your redirect URI by navigating here (Settings > Integrations > Single Sign On > New SSO Setting > Azure).
Hit register.
On completion of re-registering an app, you need to get the Application (client) ID from Azure, highlighted below on the overview page of the app
Next, head to branding on the next page and complete the details ensuring the home page URL is filled out with your special URL. This is the most important part. You can then optionally upload one of Tanda's logos.
Input your special URL. What comes after company should be nice and simple (ideally the initials of your business name. Don't use any caps or symbols etc. It is not user-facing.)
Now head back into Tanda and enter your client secret and other required details. This information can be found here. (Your company name should be the name you used at the end of your URL earlier in step 9)
You still need to set an application admin/owner/group in Azure (if not complete already) and assign the app to the relevant users or groups.
You can assign owner(s) from the owner's tab in the side navigation of Azure
You can then add the application to users from the enterprise applications screen which you can search for from the top global search bar in Azure.
Logging in:
In the current state, you will need to access the integration via your Azure Dashboard to SSO into Tanda. You can vote for service provider initiation on the Tanda log-in page by voting for the feature here.