How do I set up Single Sign On (SSO) with MS Azure for Dear Lucy?

Create groups and share IDs

In order for us to successfully activate SSO to your Dear Lucy dashboards, a couple of simple actions are required on your behalf.

• Create three AD (Active Directory) groups: one group for all dashboard users (optional), one group for regular dashboard users and one group for admin dashboard users.
• Send us the Object IDs for each of these three user groups and your Azure Tenant ID.

Steps for creating AD groups for Admin and Basic user:

1. Sign in to the Azure portal with an account that has administration rights for the directory.

2. Select All Services, and then choose Groups

3. Select + New Group

4. Create the three groups with descriptive names and assign the correct members to them. The first group determines whether the person can access the dashboards or not. The group for regular users can only view content in the dashboard, whereas Admin users can also change the settings of the dashboard.

5. When you have finished adding members to the groups, select Create on the Group blade. 

Identifying and sharing the Tenant ID

1. Sign in to the Azure portal with an account that has administration rights for the directory.

2. Select the Azure Active Directory.

3. Select Properties.

4. Identify, copy and send the Directory ID number to Dear Lucy.

Identifying and sharing the Object IDs of the three separate groups

1. Sign in to the Azure portal with an account that has administration rights for the directory.

2. Select the Azure Active Directory.

3. Select Groups.

4. Click the newly created General, Admin or Basic user group from the list

5. Identify, copy and send the Object ID number to Dear Lucy.

6. Repeat step 4 and 5 for the other groups.