How to: Enable Azure Active Directory (AAD) Single Sign On

Configure your Azure Active Directory

Login to your Azure Administration portal at http://manage.windowsazure.com/ and select the directory to be used for Single Sign On

Click on APPLICATIONS

Click on ADD in the toolbar at the bottom of the page to add a new application

Select Add an application my organization is developing

Enter a Name and select WEB APPLICATION

Enter the Url of your Mobility Portal (e.g. https://portal.toastergroup.com/) twice

On the next page click on VIEW ENDPOINTS in the bottom toolbar

Copy the value of Federation Metadata Document e.g. https://login.windows.net/a5a074ff-5534-49e1-8499-1a720aa8effd/federationmetadata/2007-06/federationmetadata.xml

Enable Federated Identity

Now go to your Mobility Portal Administration -> Settings -> Identity and select Federated Identity

Copy the value of Federation Metadata Document and click on Load Metadata

Accept the shown default values by clicking on Save

The settings menu now shows two additional links ADFS: Test, ADFS: Enable

Now click on ADFS: Enable, this first tests the ADFS Settings and then shows a result page:

Now click on Confirm to enable the Federated Authentication with Azure Active Directory