Skip to main content

SSO: Microsoft Entra ID

Updated
The Single Sign On (SSO) feature allows RPost customers to log in to RPost products using their corporate email address if their organization stores their employee’s identity in Microsoft Entra ID.
Using SSO helps corporate users save time by not having to enter their credentials each time they need to access RPost products.

This article covers the following topics:

 

Microsoft Entra ID SSO Setup

To activate SSO for their company users, administrators need to complete a one-time setup in Microsoft Entra ID, consisting of registering the RCAP (RPost Centralized Access Platform) endpoint URL in their Microsoft Entra ID tenant.

To complete the one-time setup, follow these steps:

From the RPost product login page, click on the Single Sign-on (SSO) button.

The example below shows the RMail Online login page. The steps are the same for all RPost products. 

Screen_Shot_2022-10-11_at_12.09.42_PM.png

The first time, if Microsoft Entra ID has not been configured yet, the following Microsoft pop-up will be displayed. Click on the Accept button.

blobid1.png

Sign in with the admin account to grant the necessary permissions and complete the necessary setup.

blobid2.png

Logging in using SSO

Once the initial setup is complete, users can login using SSO. To do so, follow these steps:

1. From the RPost product login page, click on the Single Sign-on (SSO) button. The example below shows the RMail Online login page.

Screen_Shot_2022-10-11_at_12.09.42_PM.png

2. Click on the Microsoft Azure icon.

blobid4.png

3. Select an account or add a new account.

blobid5.png

4. Complete the corresponding credentials steps. Once the credentials have been entered, click on Yes when asked whether to stay signed in.

blobid6.png

5. You will be redirected to the product home page after successfully logging into your Microsoft account.

Screen_Shot_2022-10-11_at_12.17.50_PM.png

 

Configuring SSO in RPortal

The customer admin needs to enable the customer account for Single Sign-On. If the customer does not have RPortal access, they should contact their RPost Customer Success or Sales representative.

1. Under the Settings Tab, look for the Single Sign-On option.

1.png

2. Enable the Enterprise Authorization SSO by checking the box.

2.png

3. After selecting the checkbox, the following options will display:
- Domain Address
- Send Admin Consent
- Enter Admin Email Address
Enter the required domain address. You can add multiple domains by clicking on the + button.

3.png

Note: When the Restrict Users to SSO option is set to Enable, users using that specific domain will only be able to login using SSO; in other words, users will not be able to login into the application with their regular RPost credentials. 

4.png

4. To receive the admin consent, check the Send Admin Consent box and provide the corresponding email address. Alternatively, you can copy the link by clicking on the clipboard icon.

5.png

5. Click on the Send Email button to display all the domain addresses and check the ones you would like to send the Admin Consent to.  Press the Send Email button.

  6.png

6. The Admin Consent email will be sent to the provided email addresses. 

7.png