Single sign on - client user guide
- Kelly Collins
You can link your client portal system, with your Microsoft Active Directory system so that your users will not need a separate username and password. This will allow you to put a link on your Intranet that will take your employees directly into the system. Initially when a user logs in, they will be required to enter their email address. After that, it is stored and a button will be displayed allowing the user to click and be taken directly to the system.
While we cannot offer assistance with the configuration, we have provided you below with some instructions on how your IT team would do this and where you will get the information that RSM require to set this up for you. At the bottom of this page are the details that we require to apply to your client portal, for the SSO to be enabled.
What information does RSM need?
Configuration
To use this feature, you would need your IT team to configure an application in your Active Directory. If you use Azure, you will do this by creating an application with the details shown below.
Please note: We cannot offer assistance with the configuration. Please contact your IT Team or services provider if you have any problems.
Firstly, login to your Azure portal and click active directory.
Click app registrations and then click new registration link.
On the next page, enter a name (e.g. RSM client portal) and enter https://portal.es.rsmuk.com/ClientPortal/Account/Login into the redirect URL box
Click the register button and you will see a screen similar to the one shown below.
From the next page, copy the application (client) ID.
We'll need this piece of information later.
Now click the end points tab
Copy the values from the openID connect metadata document field.
We'll need this piece of information later.
Make sure the ID Tokens tab is ticked
Now set up a client secret.
1 - Click the certificates and secrets link
2 - Click new client secret.
3 - In the popup, enter a description for your use. We recommend that you chose never in the expires field. Once complete click add.
When the page refreshes, copy the value immediately, there is a clipboard option.
Please note: If you move away from this screen, you will not be able to copy this value again and you'll have to repeat the process.
We'll need this piece of information later.
What information does RSM need?
You now have all the information you need for us to configure your single sign-on. Please provide the following details to your support team.
- The OpenID Connect Configuration URL
- The Client ID
- The Client Secret
- Optionally, your public key
Once our support team have received these details, they will perform the configuration and invite you to test your access.