Introduction

This article describes how to configure and use the OpenID Connect feature to link your Utilisphere user account with your Microsoft Azure Active Directory (Azure AD) account. This permits you to log in to Utilisphere using your standard company Microsoft credentials (Single Sign-On).

TABLE OF CONTENTS

• Microsoft Azure Tenant ID (Company Administrator)
• Link Your User Account
• Log In Using Microsoft Azure AD

This article contains instructions for:

• Utilisphere Company Administrators: To get the Microsoft Azure Tenant ID.
  
• Utilisphere End Users: How to link their individual Utilisphere account to their Azure AD account after company configuration is complete.

Prerequisites

• The Utilisphere tenant must be correctly set up.
• The system-level setting to permit OpenID login must be enabled by Utilisphere technical staff.
• Your company must use Microsoft Azure AD for user authentication.

Microsoft Azure Tenant ID (Company Administrator)

User - Company Admin

To get the Microsoft Azure Tenant ID follow below steps.

• Open your web browser and navigate to the Azure portal.
• Enter your Azure account credentials (username and password) and sign in.

• Navigate to account overview.

• This ID is also referred to as a Client ID.

• Click on copy icon to copy the Tenant ID.

Note - The System Administrator requires the Tenant ID to configure OpenID for the company.

Link Your User Account (Company User)

Users - All Utilisphere Users within a configured company.

Note - Your Utilisphere System Administrator must complete.

Connect your Utilisphere account to your Microsoft Azure AD account for Single Sign-On.

1. Log in to Utilisphere using your standard Utilisphere username and password.

2. Navigate to User Profile Settings page.

3. Find the option or link related to Link Microsoft account.

Note - This link only appears after your company has been configured for OpenID. System Administrators will see this link as soon as the system-level setting is enabled.

4. Click the link to start the account linking process.

5. A new window or tab will open, redirecting you to the Microsoft login page.

6. Log in using your standard company Microsoft Azure AD email address and password.

7. Microsoft Consent Prompt (Important):

• You may see a request from Microsoft for permissions. This permits the Utilisphere application to read your basic profile information for login.
• First Time Use for Company: The first user from your company to perform this linking step may see a prompt requiring administrator approval to grant access for the entire organization.
  • RECOMMENDATION: The first user from a company to link their account should have Azure AD Administrator permissions for your organization. This user can grant consent for all users in the company.
  • If the first user does not have Azure AD Administrator permissions, Microsoft will typically send a request to your company's Azure AD administrators for approval. Linking cannot complete until this approval is granted.

8. After successful authentication and consent, you will be redirected back to Utilisphere.

9. A confirmation message indicates that your account linking was successful. Your user profile page may refresh to show the linked status.

Log In Using Microsoft Azure AD

Users - All users who have successfully linked their accounts 

Log in to Utilisphere using your company Microsoft credentials.

1. Navigate to the Utilisphere login page.

2. Click the button "Sign in with Microsoft".

3. You will be redirected to the Microsoft login page (if not already logged in with Microsoft in your browser).

4. Enter your company Microsoft Azure AD credentials if prompted.

5. Upon successful authentication, Microsoft redirects you back to Utilisphere, and you will be logged in.