GETTING STARTED - AZURE AD
In this tutorial, you'll learn how to integrate WestFax with Azure Active Directory (Azure AD).
When you integrate WestFax with AD, you can:
- Control in Azure AD who has access to WestFax Fax numbers.
- Enable your users to be automatically signed-in to WestFax with their Azure AD accounts.
- Manage your accounts in one central location.
To get started, you need the following items:
- Azure AD subscription
- WestFax Enterprise account with AD/SSO enabled.
Configuring WestFax for SSO
If you have enabled SSO/AD with WestFax you are just a few steps away from enabling single sign on with WestFax.
Here are the steps to get your SSO setup with WestFax:
After you are enabled you will want to login to the admin tool and go to the SSO tab and you should see a screen like this:
There are three values here you want to copy for use in the Azure setup:
You will need these values later. Copy them somewhere for use.
Here are the steps:
- Login to AD Cloud
With your admin account log into the Azure AD cloud website.
- Go the Azure Active Directory Section
- Click on App Registrations -> New Registrations
- Create the New App Registration
You can name the Display name anything. It doesn't affect the integration. In the box below you want to copy the
Consume Endpointfrom above into the
Redirect URI (Optional)field.
- Copy your Client ID and Login Endpoint.
After you hit Register you will return to the Application Settings page. You will need to copy the
Application (client) IDand the
SAML-P sign-on endpoint. You can see the sign-on endpoint by clicking Endpoints on the top of the page to launch the endpoint pop-out.
- Click Authentications on the Left Menu
On the Authentications page we are going to set several properties.
Implicit grants and hybrid flowsyou will check the box labelled
ID Tokens. Next Under
Advanced Settingsyou will
Allow Public client flows.
- Click Token Configuration on the left menu
+Add optional claim-> and then in the pop-out select
SAML. Then in the drop down select
- Click Expose and Api on the Left menu
Now you need to set the Application ID URI. Click the link named
Setand and box will popup labelled
Set the App ID URI. Copy the value from the first step labelled
Metadata Endpoint. Click Save.
Here is the screen you will add your settings.
A - Login Endpoint- This comes from the previous step in Azure.
B - Client Id (App Id)- This comes from the previous step in Azure.
C - Certificate x.509- This comes from your Azure installation.
When you are done click Save Settings.
You are now setup for SSO!
You will want your team to login using the
If you have any questions please reach out to us directly at 303-299-9329 or contact your account manager.