This guideline will walk through how to setup single sign-on using Azure AD along with how the authentication flow changes along with that setup.

1. Setup an application in Azure AD

2. Setup in exMon Data Management

3. Authentication flow

  - Web client

  - Desktop application

Setup an application in Azure AD

The first step in order to enable single sign-on using Azure AD is to setup an application in your company Azure AD. These are the steps that are required to setup an application:

  1. Navigate to and sign in with your credentials
  2. Press the View button to manage your Azure Active Directory

  3. In the left navigation pane press App registrations

  4. Next in the top navigation pane press New registration

  5. Fill in the new application information as seen below and press the Register button
  6. Next press Add an Application ID URI

  7. Press the Overview button in the left navigation pane and from there press the Redirect URIs link to register configurations for the desktop application

  8. Press the API Permission tab on the left navigation pane, select the User.Read line and press Grant admin consent for X

Setup in exMon Data Management

As of now all configurations are setup by Expectus Software so the correct information must be sent to Start by navigating to the overview for the application just created in Azure AD.

The template for the email could be something like this:

Azure Active Directory configuration
  - Application ID: {your-application-id-uri}

  - Tenant ID: {your-tenant-id}

  - Federation metadata document:{your-federation-metadata-document}

Authentication flow

After the configuration has been setup and the application registered the flow in both the desktop application and web client will be slightly different.

Web client

Navigate to and enter your email

If have setup single sign-on using Azure AD you will be redirected to your companies login site and it will probably look something like this:

Desktop application

Open up the desktop application