Configuring OIDC Setup with Azure

You can configure Single Sign-On (SSO) authentication through Azure's Active Directory (AD) and OneTrust using the OpenID Connect (OIDC) implicit grant type protocol.

To create SSO with Azure

  1. Log in to Azure at: https://portal.azure.com.
  2. Select Azure Active Directory from the navigation menu. Then, select App registrations.


  3. Click New Registration. The Register an application screen appears.


  4. Complete the fields. Then, click the Register button. For more information, see the Register an application Screen Reference

Register an application Screen Reference



Field
Description
Name

Enter a name for the new registration.

Supported account types

Select Accounts in any organizational directory (Any Azure AD directory - Multitenant) as a supported account type.

Redirect URI (optional)

Select Web as the type, then enter a published web form URL that will redirect users after successful authentication.

To enable the authentication token

  1. Upon successful registration, the App Details screen appears.


  2. Locate the Application (client) ID. Copy this value to use as the Identity Configuration Provider in your OneTrust web form.


  3. Click on the Authentication tab under Manage.
  4. Check the box for your relevant redirect URI for your public clients under Suggested Redirect URIs.


  5. Enable your desired token under Advanced Settings > Implicit Grant.


  6. Click the Save button when finished.


To create an application

  1. Navigate to Enterprise Applications under the Azure Active Directory menu.
  2. Click the New Application button. The Add an Application block appears.

  3. Add a new, non-gallery application. In the Add your own application block, enter a name for the application. Then, select the Add button.


  4. When the application is successfully added, the Getting Started screen appears.
  5. Navigate to Single Sign-On under Manage.
  6. Select the SAML configuration method.


  7. Scroll down and locate the Azure ID Identifier block. Copy this value to use as the Base URL in your OneTrust web form.


To verify in OneTrust

  1. On the Privacy Rights Automation menu, go to Setup > Web Forms.
  2. Select your desired published web form. Then, navigate to the Verification tab.
  3. Ensure the Enable Authentication on Web Form setting is enabled. Then, add a new Identity Provider Configuration. The Identity Provider Setup modal appears.

  4. Name the Identity Provider. Then, paste the Azure ID Identifier in the Base URL field.


  5. Click the Validate button. Upon successful validation, the Configuration block will appear.
  6. Paste the Application (client) ID in the Client ID field. Distribute the draft and published web form URLs as necessary.


  7. Save and republish the form to finalize your configuration.