NCC - Azure OAuth SSO Configuration

This article is specific to the Nextiva Contact Center product.  Customers who utilize our NextOS voice service packages can contact support for specific information regarding SSO configuration for their accounts.

OAuth (Open Authorization) is an open standard for token-based authentication and authorization which is used to provide single sign-on (SSO). OAuth allows an end user's account information to be used by third-party services without exposing the user's password.

1. Log in to the Azure portal (https://portal.azure.com/#home)
   
   
2. Navigate to App Registrations and create a new application.
   
   
   
   
3. Select Accounts in this organizational directory only when asked for the supported account types.
   
   NOTE: Once created, the client and tenant IDs can be found in the Overview of the registered application
   
   
4. Create the client secret by accessing Certificates & secrets.
   
   
   
   NOTE: When creating a secret, the longest expiration time is 24 months.
   
   
   
   
5. In the application section of the registered application, it is necessary to add a Web platform for redirect URIs.  This creates a list of URIs for the Nextiva Contact Center.
   
   NOTE: These URIs will be called by the Spring OAuth 2 authentication process to ensure the requests are being received by the registered application of our choosing
   
   
6. In the API permissions section, add the Microsoft Graph permission to be used for SSO, like this:
   
   
   
   
7. Redirect URIs:
   • https://nextiva.thrio.io/provider/login/oauth2/code/azure
   • https://login.thrio.io/provider/login/oath2/code/azure
   • https://login.thrio.com/provider/login/oath/code/azure
     
     Without these permissions, Spring OAuth will not be able to obtain the user information, and the SSO will fail.
     
     
     
     
8. Document the Client ID, Tenant ID, and Client Secret.
   
   
9. Log in to your NCC client as an administrator.
   
   
10. Navigate to your tenant settings by selecting Tenant from the main menu.
    
    
11. Scroll to the Azure Single Sign-on section.
    
    
    
    
12. In each field listed below, enter the information obtained from the Azure portal.
    
    
    • Azure Client ID
      
      
    • Azure Tenant ID
      
      
    • Azure Client Secret
      
      NOTE: The field Azure User Lookup Field has a default value of preferred_username.
      
      
13. To trigger the SSO OAuth process, navigate to the following URL: {{baseURL}}/provider/oauth2/authorization/azure/{{tenantId}}
    
    NOTE: Base URL corresponds to the domain of the URL used to log in to the NCC application, for example, https://nextiva.thrio.io