This requires a producer permission. Please contact us.

Setup in Microsoft Azure

Login to

https://portal.azure.com

Select Manage Azure Active Directory

Add App Registration

Enter any Name, select Web as platform and enter ePower’s Url followed by /verified.aspx

Example: https://live.goepower.com/verified.aspx

The following screen will show once the app is registered.

Click Branding & properties and enter the Home Page Url:

ePower domain/Default.aspx?CUR=XXXXXXXXXXXXXXX

example:

https://live.goepower.com/default.aspx?CUR=d35cfd89-cee4-xxxx-xxxx-264134125c16

This url can be retrieved from epower by company (Manage Company/Options/Url)

Click Authentication to make sure that the platform is Web and that the URI is set.

Also make sure that ID tokens (used for implicit and hybrid flows) is checked.

Click Certificates & secrets. Then Add client Secret

Set a name and expiry period.

IMPORTANT: Make sure to copy the generated secret value (not the Secret ID) and save it somewhere as it will be needed in ePower and cannot be retrieved again once the page is closed

Then..

Add claims and scopes as required

email
given_name
family_name

Address information are not entered here! Use Graph.

Setup in ePower

In ePower go to Manage Producer/Options/SSO Integration and add a new one selecting the SSO Type as Azure AD

Info Required: Client ID, tenant, and secret value (save earlier)

To make a company connect by Azure, go to Manage Company/Advanced/SSO account section, select the account created earlier.

To get address and other information

Microsoft Graph must be used.

It is already implemented in ePower, the following permissions must be granted:

User.Read,

User.Read.All and

User.ReadBasic.All

This is in the API Permissions on the left side.

Make sure to click Grant Admin Consent for Default Directory as shown below:

This will only work if portal has the users’ information.