Office 365 Single Sign On & Domain Setup

Domain Setup

For cirrus8 to send emails on behalf of the your company domain, please add the below to the domains DNS entry.

•  v=spf1 a:mail.cirrus8.com.au a:mail2.cirrus8.com.au -all

Office 365 Single Sign On

To enable Office365 / Cirrus8 Single sign, Cirrus8 needs to be registered in Azure Active Directory.

To do this in the Azure Active Directory admin centre go the:

• App registration
• Add an application using + New Registration
• Add your own allocation
• Name the application cirrus8
• Select Account in this organisational directory only
• Redirect URL should be Web and https://login.cirrus8.com.au

 Then select the newly created App and under Certificates & Secrets generate a New Client Secret.

Please send the generated Application ID and Client Secret to support@cirrus8.com.au, so he can setup the SSO for the company. 

Microsoft Azure AD®

You can integrate Microsoft Azure AD® (Active Directory) with Cirrus8 to allow Azure AD (Office 365) users to authenticate and login to Cirrus8.

Set up Azure AD as an Identity Provider

When setting up the Azure AD, you will need to complete the following steps:-

1. Obtain Azure AD Settings
2. Configure API Permissions 
3. Configure Login Settings in Cirrus8

Step 1 - Obtain Azure AD Settings

The following Azure AD values are required to set up the integration:

• Application (client) ID
• Directory (tenant) ID
• Client secret

To retrieve those values:

1. Log in to the Azure Dashboard.
2. Go to All services > Azure Active Directory.
3. In the Azure Active Directory menu, go to Enterprise applications.
4. Select New application > Create your own application.
5. Name your application.
6. Select Register an application to integrate with Azure AD (App you're developing) and then select Create.
7. Under Redirect URI, select the Web platform and enter the following URL - https://login.cirrus8.com.au
8. Select Register.
   
9. Next, return to the Azure Active Directory menu and go to App registrations.
10. Select the app you just created. Copy the Application (client) ID
11. Go to Certificates & secrets and select New client secret.
12. Name the client secret and choose an expiration period.
13. After the client secret is created, copy its Value field. Store the client secret in a safe place, as it can only be viewed immediately after creation.

Step 2 - Configure API permissions in Azure

1. From the App registrations page for your application, go to API permissions.
2. Select Add a permission.
3. Select Microsoft Graph.
4. Select Delegated permissions and enable the following permissions:-
   • Email
   • Offline_access
   • Openid
   • Profile
   • User.Read
   • Directory.Read.All
   • GroupMember.Read.All
     Note: More narrow permissions may be used, however this is the set of permissions that are tested and supported by Cirrus8.
5. Once all seven permissions are enabled, select Add permissions.
6. Select Grant admin consent for Cirrus8

Step 3 - Configure Login Settings in Cirrus8

 You will require Admin rights in Cirrus8 to do the bellow steps. If you do not have this, please sent the Application Client ID and Secret Value through to Cirrus8 Support / Implementation Team to have them configure the Single Sign on for you

1. Log in to Cirrus8 and go to the Admin Portal 
2. Select the Login Settings Icon
3. In the lower half of the form make sure Office 365 is selected. If you want to disable all other login methods, uncheck Normal Login (login with username and password) and Goolge (Google Workspaces SSO).
4. Enter your company name (no spaces), Office 365 Client ID (the Application (Client) ID copied from Azure AD and the Office 365 Client Secret Key (the Secret Value copied from Azure AD).
5. Select Submit 
6. Based on the company-name entered above, your login URL will be - https://login.cirrus8.com.au/<company-name>
7. You can also login by selecting Sign in with Office 365 in the login page and entering your company-name as the Company Code and selecting Submit