Hi @Ajit Kurane ,

Configuring SSO for Specific Applications in OutSystems

1. Register the OutSystems Application in Azure AD:

   • Go to Azure AD and register your OutSystems applications (up to 3 or 4).
   • In the Azure AD App Registrations, get the Client ID and Client Secret for each of the applications.
   • For each application, add a Reply URL (Redirect URI) to point to your OutSystems environment (e.g., https://yourenvironment.outsystemscloud.com/yourapp).

2. Configure OutSystems for SSO:

   • In OutSystems, go to Service Center > Authentication settings for each of the specific applications.
   • Under Authentication Method, choose Azure AD for the apps where you want to enable SSO.
   • Input the Client ID, Tenant ID, and Client Secret from Azure AD for each app.

1. Enable SSO for Specific Users

To enable SSO only for specific users and allow others to use the default OutSystems login, you can implement a custom logic to check whether a user should use SSO or not.

Steps:

1. Add a Column in the Users Table:

   • Add a Boolean column to the User entity (e.g., UseSSO) to track if the user should authenticate using Azure AD.

2. Modify the Login Screen Logic:

   • In the Login Screen, check if the user has UseSSO = True.
   • If the user should use SSO, redirect them to Azure AD login. Otherwise, let them log in using the internal login process.
   • Example Pseudocode for Login Action:

   outsystemsCopy codeIf User.UseSSO = True Then    RedirectToAzureAD() // Redirect to Azure AD loginElse    // Proceed with OutSystems internal login process    Login(Username, Password)End If

   Redirect to Azure AD can be achieved using an External Authentication system or the SAML 2.0 component from the Forge.

2. Redirect Users Based on Their Roles After SSO

To redirect users to different dashboard pages based on their role after a successful SSO login:

1. Check User Roles:

   • Once a user logs in (whether via SSO or internal login), check their roles in the Role entity to determine which dashboard they should see.

2. Add Logic to Redirect After Login:

   • In the Login action, after checking the user's role, redirect them to the appropriate dashboard page.
   • Example Pseudocode:

   outsystemsCopy codeIf CheckUserRole(User.Id, "Admin") Then    RedirectToPage(AdminDashboardPage)ElseIf CheckUserRole(User.Id, "Manager") Then    RedirectToPage(ManagerDashboardPage)Else    RedirectToPage(UserDashboardPage)End If

   This logic can be placed in the OnAuthentication event or directly after the login process to ensure users are directed based on their role.