In order to permit signing into Hero using Microsoft Single Sign On (SSO) you will need to be your School’s Azure Administrator for your domain. We have created an Azure Active Directory (Azure AD) Application that auto-configures your Azure Tenant with an Azure Enterprise application to enable signing into Hero for your domain users.
PREREQUISITES
To configure OIDC-based SSO, you need:
-
An Azure account with an active subscription.
-
One of the following user roles: Global Administrator, Cloud Application Administrator, Application Administrator, or owner of the service principal.
INSTALL HERO IN AZURE
1. Go to go.linc-ed.com and sign out of Hero.
2. Go to the Azure Active Directory Admin Centre and sign in.
3. In the left menu, select Enterprise applications. The All applications panel opens and displays a list of the applications in your Azure AD Tenant.
4. In the Enterprise applications pane, select New application.
5. The Browse Azure AD Gallery pane opens and displays tiles for various platforms and applications. Search for and click on Hero.
6. Click Sign up for Hero.
7. Click on Hero's Microsoft Single Sign On (SSO) button.
8. Select Consent on behalf of your organisation and then select Accept. The application is added to your tenant and you will be signed into Hero.
9. In Azure, you can double check to see if Hero has been added to your Azure Tenant as an Enterprise application.
COMMON PROBLEMS
1. An email address was not provided for the user.
2. In Azure, go to Users and search for the user having the problem.
3. Click on User Properties and check the user’s email address property
4. If the email address property is empty:
- Update the user by clicking Edit Properties
- Set the user’s email address
- Click Save
Comments
0 comments
Please sign in to leave a comment.