| Availability |
Odoo Online
Odoo.sh
On Premise
|
| Odoo Apps Dependencies |
Discuss (mail)
|
| Community Apps Dependencies | Show |
| Lines of code | 339 |
| Technical Name |
pga_auth_oauth_microsoft |
| License | OPL-1 |
| Availability |
Odoo Online
Odoo.sh
On Premise
|
| Odoo Apps Dependencies |
Discuss (mail)
|
| Community Apps Dependencies | Show |
| Lines of code | 339 |
| Technical Name |
pga_auth_oauth_microsoft |
| License | OPL-1 |
Microsoft Azure Single Sign On (SSO)
Authenticate your user login using Microsoft Authentication
Configuration
Before being able to use the feature in Odoo, please follow the following steps
I. Microsoft Azure Portal (https://portal.azure.com)
-
Go to menu "App Registrations". Normally it can be found on your dashboard, if not go to menu All services > Categories: Identity > App registrations" and then Click button "New registration"
On registration page (see Picture 1), on section "Supported account types" you can choose either
- Accounts in any organizational directory (Any Azure AD Directory - Multitenant) OR
- Accounts in any organizational directory (Any Azure AD Directory - Multitenant) and personal Microsoft accounts (e.g. Skype, Xbox)
-
Authentication
+ Add a platform
Register the following URIs:
- Your domain +
/oauth_microsoft/gettoken - Your domain +
/oauth_microsoft/signin
- Your domain +
-
Certificates & secrets
+ New client secret
Note: once you created it, don't forgot to copy the "value" and save it on your note (we will need it later). You only have one chance to see it, afterwards the value will be encrypted
-
API permissions
+ Add a permission
For the SSO, we will only need to active or enable two API:
OpenId permissions
- offline_access
- openid
- Add the credential in Odoo (Client ID and Client Secret)
Picture 1
Picture 2
Picture 3
Picture 1
Picture 2
Picture 3
Picture 4
II. Odoo
-
Go to Settings > Users & Companies: OAuth Providers. Need to active developer mode to see this menu
Select "Microsoft Auth2" and then edit
Copy the Application (client) ID on your App dashboard on Azure (see picture 1)
and paste the value on field Client ID in Odoo.
Next, copy the Client Secret that you store previously on your note (see point 3 on Microsoft Azure Portal configuration above)
onto field Client Secret in Odoo. - Don't forgot to check the checkbox "Allowed"
The configuration needed has been completed. Now the Microsoft SSO is ready to use
Important to note
Only those user registered can access Odoo and use the SSO.
This means administrator need to setup or add user from your Active directory by copy-paste user Object ID (see picture 4) in Odoo (see picture 3)
Contact / Support Need help or want extra features?
Email: info@precomgroup.ch
Odoo Proprietary License v1.0 This software and associated files (the "Software") may only be used (executed, modified, executed after modifications) if you have purchased a valid license from the authors, typically via Odoo Apps, or if you have received a written agreement from the authors of the Software (see the COPYRIGHT file). You may develop Odoo modules that use the Software as a library (typically by depending on it, importing it and using its resources), but without copying any source code or material from the Software. You may distribute those modules under the license of your choice, provided that this license is compatible with the terms of the Odoo Proprietary License (For example: LGPL, MIT, or proprietary licenses similar to this one). It is forbidden to publish, distribute, sublicense, or sell copies of the Software or modified copies of the Software. The above copyright notice and this permission notice must be included in all copies or substantial portions of the Software. THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE.
Please log in to comment on this module