12
Views
7
Comments
Azure AD authentication with custom domains

Hi,

when I first had my client's OutSystems environment, I set set the Azure AD authentication using the OutSystems domain environment-name.outsystemsenterprise.com and shown on the attached screenshot (Azure_AD_Authentication.pn) and all was ok. 

Yesterday I have changed the OutSystems domain with a custom domain environment-name.my-domain-name.com. Now when I try to log in int o any application I have the error shown on the attached screenshot (Error.png).

I don't have direct access to my client's Azure AD, so I have to tell them what to do and hope they do what I say. I asked to replace the old reply address environment-name.outsystemsenterprise.com/Users on the Azure AD application with the new environment-name.my-domain-name.com/Users . they saad that they did it, but I still have the error. Is there something I need to do on the OutSystems side?

Any advice appreciate




Azure_AD_Authentication.png
Error.png
Champion

Hi,

Basically you need to ensure in OutSystems we have updated domain everywhere. Apart from that instead of changing domain name in AD should share updated SP meta data file with AD team so that we can ensure URL is updated everywhere at AD end as well. 

regards

Hi Vikas,

thanks for your reply. I am new to OutSystems, so my question may seems silly.

What do you mean for everywhere?

I can change Identity ID (n.1 on the attache screenshot), but how can I canghe Single Sign-On url and Single Logout url?

What else ho I have to change?


Thanks

Azure_AD_Authentication.png
Champion

Hi,

You don't need to change these values, they should be auto update according to environment URL.  For more details on Azure AD integration can follow the steps mentioned here.

reagrds


Hi Vikas,

As I have already done what's on that Link, and it works fine with the outsystems domain(e.g. environment-name.outsystemsenterprose.com).

Now for business reason we need to use the client domain (e.g environment-name.client-domain-name.com). So I changed the secure endpoint on in lifetime (see screenshot attached).

So, after that I get the error (see first post).

Screenshot 2023-10-26 at 13.51.53.png
Champion

Hi,

As you mentioned in first comment asked AD person to change the URL but as suggested in Step 7 of link you need to share updated SP metadata file with them to update at AD side. 

regards

Hi Vikas, 

first of all thanks for your time.

Ok, If I understood correctly all I need to do is to change field 1 (in the screenshot) from  environment-name.outsystemsenterprose.com to  environment-name.client-domain-name.com. Then I have to save (bottom of the page). Then I can click "Download SP" and share the file with my client. That should give my client updated info with the new endpoint.

Azure_AD_Authentication.png
Champion

Yes. Simply we need to update the details at our end then share the updated details with AD person (in form of SP metadata file). By this way we can ensure that everything is updated.  If still face issue then please let us know.

regards

Community GuidelinesBe kind and respectful, give credit to the original source of content, and search for duplicates before posting.