For those who wish to bypass Compleat’s own login process, you can use Azure active directory to implement single sign-on for your users. Admins are required to create an app registration in Azure to authenticate users outside of the Compleat system.
This guide only represents the steps required to configure SSO using Azure Active Directory. Please email firstname.lastname@example.org if you wish to implement SSO using another platform.
To set this up, follow the steps below, most of which are required on your Azure platform to:
- Register and get a tenant and client ID for use with your Compleat company.
- Add our Compleat SSO guest account to your app registration.
Your Compleat usernames need to match those of your Azure AD, if they don’t, a renaming process may be required.
Configure Azure & generate Tenant & Client IDs
- Login to Azure management portal.
- Select Azure Active Directory.
- Click App registrations on the left of the screen.
- Click New registration.
- Type an appropriate name for your client’s registration.
- Select who can use this registration.
We recommend selecting - Accounts in this organizational directory only.
For a full user experience, provide a redirect URI to direct users to your Compleat login screen.
Paste the URL of your login page.
Cloud login URL:
On-premise login URL:
- Click Register.
- Click Authentication on the left.
- Scroll down to locate the Front-channel logout URL
Paste Compleat’s logout URL into the field box.
Cloud logout URL:
On-premise logout URL:
- Further down the page, click to select the checkbox ID tokens.
- Click Save.
- Now to get the IDs.
On the left, click Overview.
- Locate the Application (client) ID & Directory (tenant) ID ‘Copy to clipboard’ or make a note of both IDs.
- Email these IDs to email@example.com and we'll sort the configuration on our side.
You're on the home stretch for setting up single sign-on. Once you have sent the IDs to us, the last point to do is add a Compleat support guest user.
Add Compleat as a support user
Creating a Compleat support user on your Azure registration is required so we can provide full support and admin services on your Compleat account once you have implemented single sign-on.
Follow the steps below to allow a support user:
- From the Azure company overview page, click Users.
- Click New guest user.
- Select Invite user.
- Enter the email address eCompleatSSO@compleatsoftware.com
- Click Invite.
Well done, that should just about do it! We will respond to notify you when the Azure AD configuration is up and running.