You can protect your Turnkey application with your active directory via Azure AD.

1.      You should already have a Turnkey web app

2.      You should have sufficient rights to register web apps in your organization's Azure AD

Login into Portal Azure and go to Azure Active Directory:

Make a copy of your AD name (the authority name).

Then App Registrations, New Application registration:

Enter a name for your application (just an easy-read identifier).

Also enter the sign-on URL to your Turnkey – in my case: https://hkscratch.azurewebsites.net/Account/Login

You will get this screen with important information:

Copy the application ID.

You now have the Application ID Guid and the Authority name.

Manual config

If you use the Documentation:OpenID config to configure OpenId you fill the values in a TurnkeySettings file.

Config via the portal.mdriven.net

If you use the portal.mdriven.net to configure your OpenId you fill in the values in there:

We will now assign these to your application via the Turnkey-portal:

Paste your values in – then click on Send Settings And Restart:

The value for OpenId-authority for AzureAD has the form of https://login.microsoftonline.com/<your authority>/

Remember to save.

Verifying the function

Your application now has an OpenId button and when you click it, you are taken to the OpenId-authority for verification:

If this was the first login, a new SysUser object was created. You are now done with Single Sign On (SSO) via OpenId.