{"id":9438,"date":"2023-07-25T13:13:30","date_gmt":"2023-07-25T13:13:30","guid":{"rendered":"https:\/\/lng-consultancy.com\/staging\/5474\/?p=9438"},"modified":"2023-07-25T13:25:35","modified_gmt":"2023-07-25T13:25:35","slug":"sitecore-10-2-identity-server-integration-with-azure-ad-login","status":"publish","type":"post","link":"https:\/\/lng-consultancy.com\/staging\/5474\/sitecore-10-2-identity-server-integration-with-azure-ad-login\/","title":{"rendered":"Sitecore 10.2 Identity server Integration with Azure AD Login"},"content":{"rendered":"<p><strong>Abstract:<\/strong> The objective of this document is to help the developer to integrate Sitecore identity server with Azure AD using the Sitecore out of box feature.<\/p>\n<p><strong>Introduction<\/strong>: This document is intended to configure Sitecore identity server to connect with Azure AD so that Azure AD users can login to the Sitecore CMS. In this approach Sitecore identity server will act as a federation gateway to external system. Azure AD is supported out of the box with Sitecore 10.2. The below image will give more clarity to the approach:<\/p>\n<p><img data-recalc-dims=\"1\" fetchpriority=\"high\" decoding=\"async\" class=\"aligncenter wp-image-9439 size-full\" src=\"https:\/\/i0.wp.com\/lng-consultancy.com\/staging\/5474\/wp-content\/uploads\/2023\/07\/Picture1-e1690285069387.png?resize=577%2C199&ssl=1\" alt=\"\" width=\"577\" height=\"199\" srcset=\"https:\/\/i0.wp.com\/lng-consultancy.com\/staging\/5474\/wp-content\/uploads\/2023\/07\/Picture1-e1690285069387.png?w=577&ssl=1 577w, https:\/\/i0.wp.com\/lng-consultancy.com\/staging\/5474\/wp-content\/uploads\/2023\/07\/Picture1-e1690285069387.png?resize=300%2C103&ssl=1 300w\" sizes=\"(max-width: 577px) 100vw, 577px\" \/><\/p>\n<p><strong>The whole Integration is divided into two sections:<\/strong><\/p>\n<ol>\n<li>Azure Portal Configuration.<\/li>\n<li>Changes required in Sitecore Identity Server Configuration.<\/li>\n<\/ol>\n<p><strong>Azure Portal Configuration<\/strong><\/p>\n<p>The basic steps are as follows:<\/p>\n<p><strong>1.\u00a0 \u00a0Create a new Active Directory<\/strong>: Login to User Azure Portal and click create resources and search for active directory and select the one which is marked red as mentioned below in the screenshot:<\/p>\n<p><img data-recalc-dims=\"1\" decoding=\"async\" class=\"size-full wp-image-9440 aligncenter\" src=\"https:\/\/i0.wp.com\/lng-consultancy.com\/staging\/5474\/wp-content\/uploads\/2023\/07\/Picture2.png?resize=478%2C409&ssl=1\" alt=\"\" width=\"478\" height=\"409\" srcset=\"https:\/\/i0.wp.com\/lng-consultancy.com\/staging\/5474\/wp-content\/uploads\/2023\/07\/Picture2.png?w=478&ssl=1 478w, https:\/\/i0.wp.com\/lng-consultancy.com\/staging\/5474\/wp-content\/uploads\/2023\/07\/Picture2.png?resize=300%2C257&ssl=1 300w\" sizes=\"(max-width: 478px) 100vw, 478px\" \/><\/p>\n<p>Once you create the active directory, switch to that specific directory, In this document we named it <strong>SitecoreCMS<\/strong>. Once it gets created, it will look like the below image:<br \/>\n<img data-recalc-dims=\"1\" decoding=\"async\" class=\"wp-image-9441 size-full aligncenter\" src=\"https:\/\/i0.wp.com\/lng-consultancy.com\/staging\/5474\/wp-content\/uploads\/2023\/07\/Picture3.png?resize=527%2C299&ssl=1\" alt=\"\" width=\"527\" height=\"299\" srcset=\"https:\/\/i0.wp.com\/lng-consultancy.com\/staging\/5474\/wp-content\/uploads\/2023\/07\/Picture3.png?w=527&ssl=1 527w, https:\/\/i0.wp.com\/lng-consultancy.com\/staging\/5474\/wp-content\/uploads\/2023\/07\/Picture3.png?resize=300%2C170&ssl=1 300w\" sizes=\"(max-width: 527px) 100vw, 527px\" \/><br \/>\n<strong>2.\u00a0 \u00a0Create a new group<\/strong>: Create a new group inside the newly created AD SitecoreCMS Directory. Click the group section which is\u00a0 \u00a0 \u00a0 \u00a0 highlighted in red as the image below:<img data-recalc-dims=\"1\" loading=\"lazy\" decoding=\"async\" class=\"aligncenter wp-image-9443 size-full\" src=\"https:\/\/i0.wp.com\/lng-consultancy.com\/staging\/5474\/wp-content\/uploads\/2023\/07\/Picture4-1.png?resize=455%2C436&ssl=1\" alt=\"\" width=\"455\" height=\"436\" srcset=\"https:\/\/i0.wp.com\/lng-consultancy.com\/staging\/5474\/wp-content\/uploads\/2023\/07\/Picture4-1.png?w=455&ssl=1 455w, https:\/\/i0.wp.com\/lng-consultancy.com\/staging\/5474\/wp-content\/uploads\/2023\/07\/Picture4-1.png?resize=300%2C287&ssl=1 300w\" sizes=\"(max-width: 455px) 100vw, 455px\" \/>Once you click, you will get the option to create a new group. Set the Group type as <strong>Security<\/strong> and Group Name as <strong>Sitecoreusers<\/strong> , see below for reference:<img data-recalc-dims=\"1\" loading=\"lazy\" decoding=\"async\" class=\"wp-image-9445 size-full aligncenter\" src=\"https:\/\/i0.wp.com\/lng-consultancy.com\/staging\/5474\/wp-content\/uploads\/2023\/07\/Picture5-1.png?resize=439%2C365&ssl=1\" alt=\"\" width=\"439\" height=\"365\" srcset=\"https:\/\/i0.wp.com\/lng-consultancy.com\/staging\/5474\/wp-content\/uploads\/2023\/07\/Picture5-1.png?w=439&ssl=1 439w, https:\/\/i0.wp.com\/lng-consultancy.com\/staging\/5474\/wp-content\/uploads\/2023\/07\/Picture5-1.png?resize=300%2C249&ssl=1 300w\" sizes=\"(max-width: 439px) 100vw, 439px\" \/><\/p>\n<p><strong>Note \u2013 Once the group is created, capture the object id which is highlighted in red as in the below image. This object id will be used while configuring the identity server:<\/strong><\/p>\n<p><img data-recalc-dims=\"1\" loading=\"lazy\" decoding=\"async\" class=\"wp-image-9446 aligncenter\" src=\"https:\/\/i0.wp.com\/lng-consultancy.com\/staging\/5474\/wp-content\/uploads\/2023\/07\/Picture6.png?resize=840%2C398&ssl=1\" alt=\"\" width=\"840\" height=\"398\" srcset=\"https:\/\/i0.wp.com\/lng-consultancy.com\/staging\/5474\/wp-content\/uploads\/2023\/07\/Picture6.png?w=1240&ssl=1 1240w, https:\/\/i0.wp.com\/lng-consultancy.com\/staging\/5474\/wp-content\/uploads\/2023\/07\/Picture6.png?resize=300%2C142&ssl=1 300w, https:\/\/i0.wp.com\/lng-consultancy.com\/staging\/5474\/wp-content\/uploads\/2023\/07\/Picture6.png?resize=1024%2C486&ssl=1 1024w, https:\/\/i0.wp.com\/lng-consultancy.com\/staging\/5474\/wp-content\/uploads\/2023\/07\/Picture6.png?resize=768%2C364&ssl=1 768w, https:\/\/i0.wp.com\/lng-consultancy.com\/staging\/5474\/wp-content\/uploads\/2023\/07\/Picture6.png?resize=720%2C341&ssl=1 720w\" sizes=\"(max-width: 840px) 100vw, 840px\" \/><\/p>\n<p>\u00a0<\/p>\n<p><strong>3.\u00a0 \u00a0 \u00a0Create New User:<\/strong> Create a user in the newly created active directory (<strong>SitecoreCMS<\/strong>)\u00a0 as mentioned in the below image. While you create the users, go to the assignment tab and select the group which we have created in Step 2 (<strong>Sitecoreusers<\/strong>). The objective is to confine one type of users in one group which will be helpful when you assign a certain Sitecore role to a specific Group.<\/p>\n<p><img data-recalc-dims=\"1\" loading=\"lazy\" decoding=\"async\" class=\"aligncenter wp-image-9447 size-full\" src=\"https:\/\/i0.wp.com\/lng-consultancy.com\/staging\/5474\/wp-content\/uploads\/2023\/07\/Picture7.png?resize=1267%2C640&ssl=1\" alt=\"\" width=\"1267\" height=\"640\" srcset=\"https:\/\/i0.wp.com\/lng-consultancy.com\/staging\/5474\/wp-content\/uploads\/2023\/07\/Picture7.png?w=1267&ssl=1 1267w, https:\/\/i0.wp.com\/lng-consultancy.com\/staging\/5474\/wp-content\/uploads\/2023\/07\/Picture7.png?resize=300%2C152&ssl=1 300w, https:\/\/i0.wp.com\/lng-consultancy.com\/staging\/5474\/wp-content\/uploads\/2023\/07\/Picture7.png?resize=1024%2C517&ssl=1 1024w, https:\/\/i0.wp.com\/lng-consultancy.com\/staging\/5474\/wp-content\/uploads\/2023\/07\/Picture7.png?resize=768%2C388&ssl=1 768w, https:\/\/i0.wp.com\/lng-consultancy.com\/staging\/5474\/wp-content\/uploads\/2023\/07\/Picture7.png?resize=720%2C364&ssl=1 720w\" sizes=\"(max-width: 1000px) 100vw, 1000px\" \/><\/p>\n<p><strong>4.\u00a0 \u00a0 \u00a0APP Registration<\/strong>: Create an APP Registration inside the newly created SitecoreCMS AD. To create a new APP registration. Click the APP Registration button as mentioned below:<\/p>\n<p>\u00a0<\/p>\n<p><img data-recalc-dims=\"1\" loading=\"lazy\" decoding=\"async\" class=\"aligncenter wp-image-9448 size-full\" src=\"https:\/\/i0.wp.com\/lng-consultancy.com\/staging\/5474\/wp-content\/uploads\/2023\/07\/Picture8.png?resize=505%2C552&ssl=1\" alt=\"\" width=\"505\" height=\"552\" srcset=\"https:\/\/i0.wp.com\/lng-consultancy.com\/staging\/5474\/wp-content\/uploads\/2023\/07\/Picture8.png?w=505&ssl=1 505w, https:\/\/i0.wp.com\/lng-consultancy.com\/staging\/5474\/wp-content\/uploads\/2023\/07\/Picture8.png?resize=274%2C300&ssl=1 274w\" sizes=\"(max-width: 505px) 100vw, 505px\" \/><\/p>\n<p>\u00a0<\/p>\n<p><strong>Note- After creating the new APP Registration, Capture the client id and tenant id which will be used while configuring Identity server. Identity server communicates to this newly created APP Registration using this id. See the image mentioned below.<\/strong><\/p>\n<p><img data-recalc-dims=\"1\" loading=\"lazy\" decoding=\"async\" class=\"aligncenter wp-image-9449 size-full\" src=\"https:\/\/i0.wp.com\/lng-consultancy.com\/staging\/5474\/wp-content\/uploads\/2023\/07\/Picture9.png?resize=751%2C309&ssl=1\" alt=\"\" width=\"751\" height=\"309\" srcset=\"https:\/\/i0.wp.com\/lng-consultancy.com\/staging\/5474\/wp-content\/uploads\/2023\/07\/Picture9.png?w=751&ssl=1 751w, https:\/\/i0.wp.com\/lng-consultancy.com\/staging\/5474\/wp-content\/uploads\/2023\/07\/Picture9.png?resize=300%2C123&ssl=1 300w, https:\/\/i0.wp.com\/lng-consultancy.com\/staging\/5474\/wp-content\/uploads\/2023\/07\/Picture9.png?resize=720%2C296&ssl=1 720w\" sizes=\"(max-width: 751px) 100vw, 751px\" \/><\/p>\n<p>Once created, go to the Authentication section present at the left and populate the Redirect URIS (type should be web), Front Channel Log out URL and the token type should be ID token as mentioned in the below screen shot:<\/p>\n<p><img data-recalc-dims=\"1\" loading=\"lazy\" decoding=\"async\" class=\"aligncenter wp-image-9450 size-full\" src=\"https:\/\/i0.wp.com\/lng-consultancy.com\/staging\/5474\/wp-content\/uploads\/2023\/07\/Picture10.png?resize=752%2C395&ssl=1\" alt=\"\" width=\"752\" height=\"395\" srcset=\"https:\/\/i0.wp.com\/lng-consultancy.com\/staging\/5474\/wp-content\/uploads\/2023\/07\/Picture10.png?w=752&ssl=1 752w, https:\/\/i0.wp.com\/lng-consultancy.com\/staging\/5474\/wp-content\/uploads\/2023\/07\/Picture10.png?resize=300%2C158&ssl=1 300w, https:\/\/i0.wp.com\/lng-consultancy.com\/staging\/5474\/wp-content\/uploads\/2023\/07\/Picture10.png?resize=720%2C378&ssl=1 720w\" sizes=\"(max-width: 752px) 100vw, 752px\" \/><\/p>\n<p><strong>Note. Red highlighted value is the identity sever hostname. Change this value based on your local setup.<\/strong><\/p>\n<p>Update this Manifest-Select the Manifest section of the newly create APP registration and set the value of groupMembershipClaim to <strong>SecurityGroup<\/strong> as mentioned in the below image:<\/p>\n<p><img data-recalc-dims=\"1\" loading=\"lazy\" decoding=\"async\" class=\"aligncenter wp-image-9451 size-full\" src=\"https:\/\/i0.wp.com\/lng-consultancy.com\/staging\/5474\/wp-content\/uploads\/2023\/07\/Picture11.png?resize=751%2C482&ssl=1\" alt=\"\" width=\"751\" height=\"482\" srcset=\"https:\/\/i0.wp.com\/lng-consultancy.com\/staging\/5474\/wp-content\/uploads\/2023\/07\/Picture11.png?w=751&ssl=1 751w, https:\/\/i0.wp.com\/lng-consultancy.com\/staging\/5474\/wp-content\/uploads\/2023\/07\/Picture11.png?resize=300%2C193&ssl=1 300w, https:\/\/i0.wp.com\/lng-consultancy.com\/staging\/5474\/wp-content\/uploads\/2023\/07\/Picture11.png?resize=720%2C462&ssl=1 720w\" sizes=\"(max-width: 751px) 100vw, 751px\" \/><\/p>\n<p>Set Permission to the APP Registered to the Newly Create Active Directory (Sitecore CMS)<\/p>\n<p>Click the link in the highlighted area mentioned in the image below in the Newly APP registered.<\/p>\n<p><img data-recalc-dims=\"1\" loading=\"lazy\" decoding=\"async\" class=\"aligncenter wp-image-9452 size-full\" src=\"https:\/\/i0.wp.com\/lng-consultancy.com\/staging\/5474\/wp-content\/uploads\/2023\/07\/Picture12.png?resize=751%2C267&ssl=1\" alt=\"\" width=\"751\" height=\"267\" srcset=\"https:\/\/i0.wp.com\/lng-consultancy.com\/staging\/5474\/wp-content\/uploads\/2023\/07\/Picture12.png?w=751&ssl=1 751w, https:\/\/i0.wp.com\/lng-consultancy.com\/staging\/5474\/wp-content\/uploads\/2023\/07\/Picture12.png?resize=300%2C107&ssl=1 300w, https:\/\/i0.wp.com\/lng-consultancy.com\/staging\/5474\/wp-content\/uploads\/2023\/07\/Picture12.png?resize=720%2C256&ssl=1 720w\" sizes=\"(max-width: 751px) 100vw, 751px\" \/><\/p>\n<p>Once you click it, go the permission section and set the permission to admin in the\u00a0 current active directory as mentioned below.<\/p>\n<p><img data-recalc-dims=\"1\" loading=\"lazy\" decoding=\"async\" class=\"aligncenter wp-image-9453 size-full\" src=\"https:\/\/i0.wp.com\/lng-consultancy.com\/staging\/5474\/wp-content\/uploads\/2023\/07\/Picture13.png?resize=752%2C331&ssl=1\" alt=\"\" width=\"752\" height=\"331\" srcset=\"https:\/\/i0.wp.com\/lng-consultancy.com\/staging\/5474\/wp-content\/uploads\/2023\/07\/Picture13.png?w=752&ssl=1 752w, https:\/\/i0.wp.com\/lng-consultancy.com\/staging\/5474\/wp-content\/uploads\/2023\/07\/Picture13.png?resize=300%2C132&ssl=1 300w, https:\/\/i0.wp.com\/lng-consultancy.com\/staging\/5474\/wp-content\/uploads\/2023\/07\/Picture13.png?resize=720%2C317&ssl=1 720w\" sizes=\"(max-width: 752px) 100vw, 752px\" \/><\/p>\n<p>Assign groups or users to this APP registration: Go to the users and group section of this specific APP Registration (AzureADIntegration) and add the Users or Groups as mentioned in the below screenshot. By doing this, it means we are giving access to the group which we created inside SitecoreCMS active directory to this specific APP registration (AzureADIntegration)<\/p>\n<p><img data-recalc-dims=\"1\" loading=\"lazy\" decoding=\"async\" class=\"aligncenter wp-image-9454 size-full\" src=\"https:\/\/i0.wp.com\/lng-consultancy.com\/staging\/5474\/wp-content\/uploads\/2023\/07\/Picture14.png?resize=752%2C341&ssl=1\" alt=\"\" width=\"752\" height=\"341\" srcset=\"https:\/\/i0.wp.com\/lng-consultancy.com\/staging\/5474\/wp-content\/uploads\/2023\/07\/Picture14.png?w=752&ssl=1 752w, https:\/\/i0.wp.com\/lng-consultancy.com\/staging\/5474\/wp-content\/uploads\/2023\/07\/Picture14.png?resize=300%2C136&ssl=1 300w, https:\/\/i0.wp.com\/lng-consultancy.com\/staging\/5474\/wp-content\/uploads\/2023\/07\/Picture14.png?resize=720%2C326&ssl=1 720w\" sizes=\"(max-width: 752px) 100vw, 752px\" \/><\/p>\n<p><strong>Changes required in Sitecore Identity Server Configuration<\/strong><\/p>\n<p>Sitecore 10 has the out of box feature to get integrated with Azure AD. Go to the file system path of your hosted identity server.\u201cSitecore.Plugin.IdentityProvider.AzureAd.xml \u201copen this to edit.<\/p>\n<p>C:\\inetpub\\wwwroot\\demositecoreidentityserver.dev.local\\sitecore\\Sitecore.Plugin.IdentityProvider.AzureAd\\Config<\/p>\n<p><img data-recalc-dims=\"1\" loading=\"lazy\" decoding=\"async\" class=\"aligncenter wp-image-9455 size-full\" src=\"https:\/\/i0.wp.com\/lng-consultancy.com\/staging\/5474\/wp-content\/uploads\/2023\/07\/Picture15.png?resize=602%2C343&ssl=1\" alt=\"\" width=\"602\" height=\"343\" srcset=\"https:\/\/i0.wp.com\/lng-consultancy.com\/staging\/5474\/wp-content\/uploads\/2023\/07\/Picture15.png?w=602&ssl=1 602w, https:\/\/i0.wp.com\/lng-consultancy.com\/staging\/5474\/wp-content\/uploads\/2023\/07\/Picture15.png?resize=300%2C171&ssl=1 300w\" sizes=\"(max-width: 602px) 100vw, 602px\" \/><\/p>\n<p>\u00a0<\/p>\n<p><strong>Parameters need to be updated: <\/strong><\/p>\n<ul>\n<li>Enabled: true<\/li>\n<li>ClientID : This value is the client of the App Registered in step 4 .In this document we are referring \u201cAzureADIntegration\u201d APP registered<\/li>\n<li>TenantID : This value is the Tenant id of the App Registered in step 4 .In\u00a0 this document\u00a0 we are referring to the \u201cAzureADIntegration\u201d APP registered.<\/li>\n<\/ul>\n<p><strong>Note: Once these value are updated, restart the app pool of the identity server to reflect the changes.<\/strong><\/p>\n<p>Once this is done, we will be able to see the Azure login button as shown below.<\/p>\n<p><img data-recalc-dims=\"1\" loading=\"lazy\" decoding=\"async\" class=\"aligncenter wp-image-9456 size-full\" src=\"https:\/\/i0.wp.com\/lng-consultancy.com\/staging\/5474\/wp-content\/uploads\/2023\/07\/Picture16.png?resize=1181%2C767&ssl=1\" alt=\"\" width=\"1181\" height=\"767\" srcset=\"https:\/\/i0.wp.com\/lng-consultancy.com\/staging\/5474\/wp-content\/uploads\/2023\/07\/Picture16.png?w=1181&ssl=1 1181w, https:\/\/i0.wp.com\/lng-consultancy.com\/staging\/5474\/wp-content\/uploads\/2023\/07\/Picture16.png?resize=300%2C195&ssl=1 300w, https:\/\/i0.wp.com\/lng-consultancy.com\/staging\/5474\/wp-content\/uploads\/2023\/07\/Picture16.png?resize=1024%2C665&ssl=1 1024w, https:\/\/i0.wp.com\/lng-consultancy.com\/staging\/5474\/wp-content\/uploads\/2023\/07\/Picture16.png?resize=768%2C499&ssl=1 768w, https:\/\/i0.wp.com\/lng-consultancy.com\/staging\/5474\/wp-content\/uploads\/2023\/07\/Picture16.png?resize=720%2C468&ssl=1 720w\" sizes=\"(max-width: 1000px) 100vw, 1000px\" \/><\/p>\n<p>These changes are not enough to get login, it will just show you the azure login button we need to update a few more parameters of the same file.<\/p>\n<p><strong>Parameters need to be updated:<\/strong><\/p>\n<ul>\n<li><strong>AzureADUserToAdminUser<\/strong>: Un-comment this tag and place it after claimtransformation2 closing tag as mentioned in the image below:<\/li>\n<\/ul>\n<p><img data-recalc-dims=\"1\" loading=\"lazy\" decoding=\"async\" class=\"aligncenter wp-image-9457 size-full\" src=\"https:\/\/i0.wp.com\/lng-consultancy.com\/staging\/5474\/wp-content\/uploads\/2023\/07\/Picture17.png?resize=716%2C337&ssl=1\" alt=\"\" width=\"716\" height=\"337\" srcset=\"https:\/\/i0.wp.com\/lng-consultancy.com\/staging\/5474\/wp-content\/uploads\/2023\/07\/Picture17.png?w=716&ssl=1 716w, https:\/\/i0.wp.com\/lng-consultancy.com\/staging\/5474\/wp-content\/uploads\/2023\/07\/Picture17.png?resize=300%2C141&ssl=1 300w\" sizes=\"(max-width: 716px) 100vw, 716px\" \/><\/p>\n<p>Update the value of claim1 type \u201cgroups\u201d in this tag with the object id we created in step 2 of group creation (Please see t he screenshot below for reference).\u00a0 In the new claim type section, I made isadmin false intentionally to make this group act as content author.<\/p>\n<p><img data-recalc-dims=\"1\" loading=\"lazy\" decoding=\"async\" class=\"aligncenter wp-image-9458 size-full\" src=\"https:\/\/i0.wp.com\/lng-consultancy.com\/staging\/5474\/wp-content\/uploads\/2023\/07\/Picture18.png?resize=1047%2C497&ssl=1\" alt=\"\" width=\"1047\" height=\"497\" srcset=\"https:\/\/i0.wp.com\/lng-consultancy.com\/staging\/5474\/wp-content\/uploads\/2023\/07\/Picture18.png?w=1047&ssl=1 1047w, https:\/\/i0.wp.com\/lng-consultancy.com\/staging\/5474\/wp-content\/uploads\/2023\/07\/Picture18.png?resize=300%2C142&ssl=1 300w, https:\/\/i0.wp.com\/lng-consultancy.com\/staging\/5474\/wp-content\/uploads\/2023\/07\/Picture18.png?resize=1024%2C486&ssl=1 1024w, https:\/\/i0.wp.com\/lng-consultancy.com\/staging\/5474\/wp-content\/uploads\/2023\/07\/Picture18.png?resize=768%2C365&ssl=1 768w, https:\/\/i0.wp.com\/lng-consultancy.com\/staging\/5474\/wp-content\/uploads\/2023\/07\/Picture18.png?resize=720%2C342&ssl=1 720w\" sizes=\"(max-width: 1000px) 100vw, 1000px\" \/><\/p>\n<ul>\n<li><strong>AzureGroupTransformation: <\/strong>Uncomment this tag and place it after the AzureADUserToAdminUser closing tag. Again, update the value of claim type groups with the object id of the group created in step 2 as in above image.<\/li>\n<\/ul>\n<p><img data-recalc-dims=\"1\" loading=\"lazy\" decoding=\"async\" class=\"aligncenter wp-image-9459 size-full\" src=\"https:\/\/i0.wp.com\/lng-consultancy.com\/staging\/5474\/wp-content\/uploads\/2023\/07\/Picture19.png?resize=751%2C337&ssl=1\" alt=\"\" width=\"751\" height=\"337\" srcset=\"https:\/\/i0.wp.com\/lng-consultancy.com\/staging\/5474\/wp-content\/uploads\/2023\/07\/Picture19.png?w=751&ssl=1 751w, https:\/\/i0.wp.com\/lng-consultancy.com\/staging\/5474\/wp-content\/uploads\/2023\/07\/Picture19.png?resize=300%2C135&ssl=1 300w, https:\/\/i0.wp.com\/lng-consultancy.com\/staging\/5474\/wp-content\/uploads\/2023\/07\/Picture19.png?resize=720%2C323&ssl=1 720w\" sizes=\"(max-width: 751px) 100vw, 751px\" \/><\/p>\n<p><strong>Note: Once these values are updated, restart the app pool of the identity server to reflect the changes.<\/strong><\/p>\n<p>Once you complete the above steps you will be able to login using Azure login button.<\/p>\n<p><img data-recalc-dims=\"1\" loading=\"lazy\" decoding=\"async\" class=\"aligncenter wp-image-9460 size-full\" src=\"https:\/\/i0.wp.com\/lng-consultancy.com\/staging\/5474\/wp-content\/uploads\/2023\/07\/Picture20.png?resize=1229%2C608&ssl=1\" alt=\"\" width=\"1229\" height=\"608\" srcset=\"https:\/\/i0.wp.com\/lng-consultancy.com\/staging\/5474\/wp-content\/uploads\/2023\/07\/Picture20.png?w=1229&ssl=1 1229w, https:\/\/i0.wp.com\/lng-consultancy.com\/staging\/5474\/wp-content\/uploads\/2023\/07\/Picture20.png?resize=300%2C148&ssl=1 300w, https:\/\/i0.wp.com\/lng-consultancy.com\/staging\/5474\/wp-content\/uploads\/2023\/07\/Picture20.png?resize=1024%2C507&ssl=1 1024w, https:\/\/i0.wp.com\/lng-consultancy.com\/staging\/5474\/wp-content\/uploads\/2023\/07\/Picture20.png?resize=768%2C380&ssl=1 768w, https:\/\/i0.wp.com\/lng-consultancy.com\/staging\/5474\/wp-content\/uploads\/2023\/07\/Picture20.png?resize=720%2C356&ssl=1 720w\" sizes=\"(max-width: 1000px) 100vw, 1000px\" \/><\/p>\n<p>\u00a0<\/p>\n<p><strong>Note :<\/strong> <strong>Since I made this group to act as a content Author that\u2019s the reason we are seeing this spec<\/strong><strong>i<\/strong><strong>fic user is acting as content Author.<\/strong><strong>\u00a0<\/strong><\/p>\n<p><strong>Conclusion: <\/strong>In this blog I have integrated AzureAD with Sitecore identity server\u00a0 so that a user \u00a0\u00a0can\u00a0 Login to Sitecore 10 CMS using AzureAD<strong> .<\/strong><\/p>\n","protected":false},"excerpt":{"rendered":"<p>Abstract: The objective of this document is to help the developer to integrate Sitecore identity server with Azure AD using the Sitecore out of box feature. Introduction: This document is intended to configure Sitecore identity server to connect with Azure AD so that Azure AD users can login to the Sitecore CMS. In this approach [&hellip;]<\/p>\n","protected":false},"author":25,"featured_media":9439,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_acf_changed":false,"nf_dc_page":"","om_disable_all_campaigns":false,"_monsterinsights_skip_tracking":false,"_monsterinsights_sitenote_active":false,"_monsterinsights_sitenote_note":"","_monsterinsights_sitenote_category":0,"_jetpack_memberships_contains_paid_content":false,"footnotes":""},"categories":[32],"tags":[108],"class_list":["post-9438","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-software-development","tag-sitecore"],"acf":[],"yoast_head":"<!-- This site is optimized with the Yoast SEO plugin v27.6 - https:\/\/yoast.com\/product\/yoast-seo-wordpress\/ -->\n<title>Sitecore 10.2 Identity server Integration with Azure AD Login - L&amp;G Consultancy<\/title>\n<meta name=\"description\" content=\"Sitecore Identity server , Sitecore 10 , Azure Ad Login\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/lng-consultancy.com\/sitecore-10-2-identity-server-integration-with-azure-ad-login\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Sitecore 10.2 Identity server Integration with Azure AD Login - L&amp;G Consultancy\" \/>\n<meta property=\"og:description\" content=\"Sitecore Identity server , Sitecore 10 , Azure Ad Login\" \/>\n<meta property=\"og:url\" content=\"https:\/\/lng-consultancy.com\/sitecore-10-2-identity-server-integration-with-azure-ad-login\/\" \/>\n<meta property=\"og:site_name\" content=\"L&amp;G Consultancy\" \/>\n<meta property=\"article:published_time\" content=\"2023-07-25T13:13:30+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2023-07-25T13:25:35+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/lng-consultancy.com\/wp-content\/uploads\/2023\/07\/Picture1-e1690285069387.png\" \/>\n\t<meta property=\"og:image:width\" content=\"577\" \/>\n\t<meta property=\"og:image:height\" content=\"199\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/png\" \/>\n<meta name=\"author\" content=\"Chandan\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"Chandan\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"9 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\\\/\\\/lng-consultancy.com\\\/sitecore-10-2-identity-server-integration-with-azure-ad-login\\\/#article\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/lng-consultancy.com\\\/sitecore-10-2-identity-server-integration-with-azure-ad-login\\\/\"},\"author\":{\"name\":\"Chandan\",\"@id\":\"http:\\\/\\\/sh024.global.temp.domains\\\/~landgcon\\\/#\\\/schema\\\/person\\\/893d92b59702fbdfafe535c36a65222b\"},\"headline\":\"Sitecore 10.2 Identity server Integration with Azure AD Login\",\"datePublished\":\"2023-07-25T13:13:30+00:00\",\"dateModified\":\"2023-07-25T13:25:35+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\\\/\\\/lng-consultancy.com\\\/sitecore-10-2-identity-server-integration-with-azure-ad-login\\\/\"},\"wordCount\":961,\"commentCount\":0,\"image\":{\"@id\":\"https:\\\/\\\/lng-consultancy.com\\\/sitecore-10-2-identity-server-integration-with-azure-ad-login\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/i0.wp.com\\\/lng-consultancy.com\\\/staging\\\/5474\\\/wp-content\\\/uploads\\\/2023\\\/07\\\/Picture1-e1690285069387.png?fit=577%2C199&ssl=1\",\"keywords\":[\"Sitecore\"],\"articleSection\":[\"Software Development\"],\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"CommentAction\",\"name\":\"Comment\",\"target\":[\"https:\\\/\\\/lng-consultancy.com\\\/sitecore-10-2-identity-server-integration-with-azure-ad-login\\\/#respond\"]}]},{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/lng-consultancy.com\\\/sitecore-10-2-identity-server-integration-with-azure-ad-login\\\/\",\"url\":\"https:\\\/\\\/lng-consultancy.com\\\/sitecore-10-2-identity-server-integration-with-azure-ad-login\\\/\",\"name\":\"Sitecore 10.2 Identity server Integration with Azure AD Login - L&amp;G Consultancy\",\"isPartOf\":{\"@id\":\"http:\\\/\\\/sh024.global.temp.domains\\\/~landgcon\\\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\\\/\\\/lng-consultancy.com\\\/sitecore-10-2-identity-server-integration-with-azure-ad-login\\\/#primaryimage\"},\"image\":{\"@id\":\"https:\\\/\\\/lng-consultancy.com\\\/sitecore-10-2-identity-server-integration-with-azure-ad-login\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/i0.wp.com\\\/lng-consultancy.com\\\/staging\\\/5474\\\/wp-content\\\/uploads\\\/2023\\\/07\\\/Picture1-e1690285069387.png?fit=577%2C199&ssl=1\",\"datePublished\":\"2023-07-25T13:13:30+00:00\",\"dateModified\":\"2023-07-25T13:25:35+00:00\",\"author\":{\"@id\":\"http:\\\/\\\/sh024.global.temp.domains\\\/~landgcon\\\/#\\\/schema\\\/person\\\/893d92b59702fbdfafe535c36a65222b\"},\"description\":\"Sitecore Identity server , Sitecore 10 , Azure Ad Login\",\"breadcrumb\":{\"@id\":\"https:\\\/\\\/lng-consultancy.com\\\/sitecore-10-2-identity-server-integration-with-azure-ad-login\\\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/lng-consultancy.com\\\/sitecore-10-2-identity-server-integration-with-azure-ad-login\\\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/lng-consultancy.com\\\/sitecore-10-2-identity-server-integration-with-azure-ad-login\\\/#primaryimage\",\"url\":\"https:\\\/\\\/i0.wp.com\\\/lng-consultancy.com\\\/staging\\\/5474\\\/wp-content\\\/uploads\\\/2023\\\/07\\\/Picture1-e1690285069387.png?fit=577%2C199&ssl=1\",\"contentUrl\":\"https:\\\/\\\/i0.wp.com\\\/lng-consultancy.com\\\/staging\\\/5474\\\/wp-content\\\/uploads\\\/2023\\\/07\\\/Picture1-e1690285069387.png?fit=577%2C199&ssl=1\",\"width\":577,\"height\":199},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/lng-consultancy.com\\\/sitecore-10-2-identity-server-integration-with-azure-ad-login\\\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\\\/\\\/lng-consultancy.com\\\/staging\\\/5474\\\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Sitecore 10.2 Identity server Integration with Azure AD Login\"}]},{\"@type\":\"WebSite\",\"@id\":\"http:\\\/\\\/sh024.global.temp.domains\\\/~landgcon\\\/#website\",\"url\":\"http:\\\/\\\/sh024.global.temp.domains\\\/~landgcon\\\/\",\"name\":\"L&amp;G Consultancy\",\"description\":\"Your Technology Partner\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"http:\\\/\\\/sh024.global.temp.domains\\\/~landgcon\\\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Person\",\"@id\":\"http:\\\/\\\/sh024.global.temp.domains\\\/~landgcon\\\/#\\\/schema\\\/person\\\/893d92b59702fbdfafe535c36a65222b\",\"name\":\"Chandan\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/d3b4cb51ee6267c719edcead9b0dadb641ec2be9ec7e578d073166e39237a6fc?s=96&d=mm&r=g\",\"url\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/d3b4cb51ee6267c719edcead9b0dadb641ec2be9ec7e578d073166e39237a6fc?s=96&d=mm&r=g\",\"contentUrl\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/d3b4cb51ee6267c719edcead9b0dadb641ec2be9ec7e578d073166e39237a6fc?s=96&d=mm&r=g\",\"caption\":\"Chandan\"},\"url\":\"https:\\\/\\\/lng-consultancy.com\\\/staging\\\/5474\\\/author\\\/chandanitme\\\/\"}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"Sitecore 10.2 Identity server Integration with Azure AD Login - L&amp;G Consultancy","description":"Sitecore Identity server , Sitecore 10 , Azure Ad Login","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/lng-consultancy.com\/sitecore-10-2-identity-server-integration-with-azure-ad-login\/","og_locale":"en_US","og_type":"article","og_title":"Sitecore 10.2 Identity server Integration with Azure AD Login - L&amp;G Consultancy","og_description":"Sitecore Identity server , Sitecore 10 , Azure Ad Login","og_url":"https:\/\/lng-consultancy.com\/sitecore-10-2-identity-server-integration-with-azure-ad-login\/","og_site_name":"L&amp;G Consultancy","article_published_time":"2023-07-25T13:13:30+00:00","article_modified_time":"2023-07-25T13:25:35+00:00","og_image":[{"width":577,"height":199,"url":"https:\/\/lng-consultancy.com\/wp-content\/uploads\/2023\/07\/Picture1-e1690285069387.png","type":"image\/png"}],"author":"Chandan","twitter_card":"summary_large_image","twitter_misc":{"Written by":"Chandan","Est. reading time":"9 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/lng-consultancy.com\/sitecore-10-2-identity-server-integration-with-azure-ad-login\/#article","isPartOf":{"@id":"https:\/\/lng-consultancy.com\/sitecore-10-2-identity-server-integration-with-azure-ad-login\/"},"author":{"name":"Chandan","@id":"http:\/\/sh024.global.temp.domains\/~landgcon\/#\/schema\/person\/893d92b59702fbdfafe535c36a65222b"},"headline":"Sitecore 10.2 Identity server Integration with Azure AD Login","datePublished":"2023-07-25T13:13:30+00:00","dateModified":"2023-07-25T13:25:35+00:00","mainEntityOfPage":{"@id":"https:\/\/lng-consultancy.com\/sitecore-10-2-identity-server-integration-with-azure-ad-login\/"},"wordCount":961,"commentCount":0,"image":{"@id":"https:\/\/lng-consultancy.com\/sitecore-10-2-identity-server-integration-with-azure-ad-login\/#primaryimage"},"thumbnailUrl":"https:\/\/i0.wp.com\/lng-consultancy.com\/staging\/5474\/wp-content\/uploads\/2023\/07\/Picture1-e1690285069387.png?fit=577%2C199&ssl=1","keywords":["Sitecore"],"articleSection":["Software Development"],"inLanguage":"en-US","potentialAction":[{"@type":"CommentAction","name":"Comment","target":["https:\/\/lng-consultancy.com\/sitecore-10-2-identity-server-integration-with-azure-ad-login\/#respond"]}]},{"@type":"WebPage","@id":"https:\/\/lng-consultancy.com\/sitecore-10-2-identity-server-integration-with-azure-ad-login\/","url":"https:\/\/lng-consultancy.com\/sitecore-10-2-identity-server-integration-with-azure-ad-login\/","name":"Sitecore 10.2 Identity server Integration with Azure AD Login - L&amp;G Consultancy","isPartOf":{"@id":"http:\/\/sh024.global.temp.domains\/~landgcon\/#website"},"primaryImageOfPage":{"@id":"https:\/\/lng-consultancy.com\/sitecore-10-2-identity-server-integration-with-azure-ad-login\/#primaryimage"},"image":{"@id":"https:\/\/lng-consultancy.com\/sitecore-10-2-identity-server-integration-with-azure-ad-login\/#primaryimage"},"thumbnailUrl":"https:\/\/i0.wp.com\/lng-consultancy.com\/staging\/5474\/wp-content\/uploads\/2023\/07\/Picture1-e1690285069387.png?fit=577%2C199&ssl=1","datePublished":"2023-07-25T13:13:30+00:00","dateModified":"2023-07-25T13:25:35+00:00","author":{"@id":"http:\/\/sh024.global.temp.domains\/~landgcon\/#\/schema\/person\/893d92b59702fbdfafe535c36a65222b"},"description":"Sitecore Identity server , Sitecore 10 , Azure Ad Login","breadcrumb":{"@id":"https:\/\/lng-consultancy.com\/sitecore-10-2-identity-server-integration-with-azure-ad-login\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/lng-consultancy.com\/sitecore-10-2-identity-server-integration-with-azure-ad-login\/"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/lng-consultancy.com\/sitecore-10-2-identity-server-integration-with-azure-ad-login\/#primaryimage","url":"https:\/\/i0.wp.com\/lng-consultancy.com\/staging\/5474\/wp-content\/uploads\/2023\/07\/Picture1-e1690285069387.png?fit=577%2C199&ssl=1","contentUrl":"https:\/\/i0.wp.com\/lng-consultancy.com\/staging\/5474\/wp-content\/uploads\/2023\/07\/Picture1-e1690285069387.png?fit=577%2C199&ssl=1","width":577,"height":199},{"@type":"BreadcrumbList","@id":"https:\/\/lng-consultancy.com\/sitecore-10-2-identity-server-integration-with-azure-ad-login\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/lng-consultancy.com\/staging\/5474\/"},{"@type":"ListItem","position":2,"name":"Sitecore 10.2 Identity server Integration with Azure AD Login"}]},{"@type":"WebSite","@id":"http:\/\/sh024.global.temp.domains\/~landgcon\/#website","url":"http:\/\/sh024.global.temp.domains\/~landgcon\/","name":"L&amp;G Consultancy","description":"Your Technology Partner","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"http:\/\/sh024.global.temp.domains\/~landgcon\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Person","@id":"http:\/\/sh024.global.temp.domains\/~landgcon\/#\/schema\/person\/893d92b59702fbdfafe535c36a65222b","name":"Chandan","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/secure.gravatar.com\/avatar\/d3b4cb51ee6267c719edcead9b0dadb641ec2be9ec7e578d073166e39237a6fc?s=96&d=mm&r=g","url":"https:\/\/secure.gravatar.com\/avatar\/d3b4cb51ee6267c719edcead9b0dadb641ec2be9ec7e578d073166e39237a6fc?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/d3b4cb51ee6267c719edcead9b0dadb641ec2be9ec7e578d073166e39237a6fc?s=96&d=mm&r=g","caption":"Chandan"},"url":"https:\/\/lng-consultancy.com\/staging\/5474\/author\/chandanitme\/"}]}},"jetpack_featured_media_url":"https:\/\/i0.wp.com\/lng-consultancy.com\/staging\/5474\/wp-content\/uploads\/2023\/07\/Picture1-e1690285069387.png?fit=577%2C199&ssl=1","jetpack_sharing_enabled":true,"_links":{"self":[{"href":"https:\/\/lng-consultancy.com\/staging\/5474\/wp-json\/wp\/v2\/posts\/9438","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/lng-consultancy.com\/staging\/5474\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/lng-consultancy.com\/staging\/5474\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/lng-consultancy.com\/staging\/5474\/wp-json\/wp\/v2\/users\/25"}],"replies":[{"embeddable":true,"href":"https:\/\/lng-consultancy.com\/staging\/5474\/wp-json\/wp\/v2\/comments?post=9438"}],"version-history":[{"count":5,"href":"https:\/\/lng-consultancy.com\/staging\/5474\/wp-json\/wp\/v2\/posts\/9438\/revisions"}],"predecessor-version":[{"id":9466,"href":"https:\/\/lng-consultancy.com\/staging\/5474\/wp-json\/wp\/v2\/posts\/9438\/revisions\/9466"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/lng-consultancy.com\/staging\/5474\/wp-json\/wp\/v2\/media\/9439"}],"wp:attachment":[{"href":"https:\/\/lng-consultancy.com\/staging\/5474\/wp-json\/wp\/v2\/media?parent=9438"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/lng-consultancy.com\/staging\/5474\/wp-json\/wp\/v2\/categories?post=9438"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/lng-consultancy.com\/staging\/5474\/wp-json\/wp\/v2\/tags?post=9438"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}