Azure Active Directory /Entra SSO login throughout all registered apps

Kartik Shetty 0 Reputation points
2024-10-17T13:23:39.9133333+00:00

I am currently working on a React project for my organization where I need to implement single sign on to get the users email and name. The app is registered under the same subgroup in which all the employees belong to. There are currently multiple apps under the group and I want to check whether the employee who visits the page has already logged to any one of the apps and if they are logged into it then I should get the same session and the person need not require to login again. My organization has a main employee website where everyone needs to login and it is registered under the same group as the current application that I am working on but the employee website is built on sharepoint and I am working on React. So, is there a way through which I can continue from the same session ? If so can someone please guide me on how to do so ?

Windows for business | Windows Client for IT Pros | Directory services | Active Directory
Microsoft Security | Microsoft Entra | Other
{count} votes

1 answer

Sort by: Most helpful
  1. Neuvi Jiang 1,540 Reputation points Microsoft External Staff
    2024-10-18T07:39:59.29+00:00

    Hi Kartik Shetty,

    Thank you for posting in the Q&A Forums.

    Confirm SSO provider:First, you need to confirm that your organization already has an SSO solution in place, such as Azure AD, Okta, OneLogin, and so on. These services typically allow you to configure multiple apps so that users can log in at one place and then not have to log in again to other integrated apps.Integrate SSO to React apps:If using Azure AD, you can utilize the msal.js library to integrate authentication with Azure AD.For Okta, you can use okta-auth-js.There are also SDKs for OneLogin and others.Integration usually involves setting up client IDs, client keys, redirect URIs, etc., which need to be configured in the SSO provider's backend administration.

    Configure SSO for SharePoint and React applications:If SharePoint Online is already configured for SSO (usually through Office 365 or Azure AD), you just need to make sure that React apps use the same SSO mechanism.Verify that the React app recognizes session cookies or tokens from SharePoint or other logged-in apps.Use token passing:

    If the React app and SharePoint are not under the same domain, or if you can't share session information directly for security reasons, you may need to implement Token Propagation. This means that when a user navigates from SharePoint to a React app, an authentication token can be passed via a URL parameter, hidden field, or HTTP header, which can then be used by the React app to authenticate the user without requiring the user to log back in.Front-end and back-end collaboration:

    Cleaning up the print queue can free up printer resources and improve printing speed.Third, check the domain environment configurationVerify domain user permissions:Ensure that domain users have the appropriate permissions to access shared printers.Check domain policies:

    Best regards

    NeuviJ

    ============================================

    If the Answer is helpful, please click "Accept Answer" and upvote it.


Your answer

Answers can be marked as 'Accepted' by the question author and 'Recommended' by moderators, which helps users know the answer solved the author's problem.