Splash Access Azure Setup

To setup Azure AD with Splash Access please follow the instruction below:

If you wish to use Office 365, you will need to select / create an APP under https://portal.azure.com, our system would then re-direct the users to login using their Office 365 information

====================================================

Access Microsoft Azure Portal https://portal.azure.com

2.     Navigate and click on ‘Manage Azure Active Directory’ [View]

3.     Click on App registrations on the left menu.

4.     Click on the App name e.g. SplashAccess or create a Web app / API type application.

5.     Copy the Application (client) ID & Directory (tenant) ID found on this page hover over each and click to copy to clipboard. Paste them into notepad or notes or copy them directly into your Splash Access portal.

6.     Head to > Authentication > Web Redirect URIs.
Enter the following (Replace <YourSplashURL> with your account): https://<YourSplashURL>/social.php

7.     Now scroll down and Check ‘ID Tokens (used for implicit and hybrid flows’)

8.     Check ‘Accounts in this organizational directory only (Default only – Single tenant)

9.     Click Save

10.   Go into Certificates & secrets
Generate a new client secret for Splash Access. Enter a name I.E SplashAccess and select the longest period for Expires and make a note as you will need to update this before / when it expires! Click Add.

N.B  Please keep this key in a safe place along with the above details

 

11.   Copy the VALUE field into notepad or notes or directly into our Splash Access Azure Secret key field.

12.   API Permissions, click Add a permission and select Microsoft Graph – Delegated permissions.
Click Grant admin consent for [APP Name]

Search and select the following Permissions in the Select permissions search bar.
Contacts.Read, Directory.Readl.All, email, openid, profile , User.Read and click [ Add permissions ]

==========================================

Please let us know if you require any assistance or have any further questions or requirements.

Azure Walled Garden IP’s:

*.campuswifi.net

*.microsoftonline.com

*.azure.com

*.splash-access.com

*.splashaccess.com

*.microsoft.com

*.aadcdn.microsoftonline-p.com

*.aka.ms

*.applicationinsights.io

*.azure.com

*.azure.net

*.azurefd.net

*.azure-api.net

*.azuredatalakestore.net

*.azureedge.net

*.loganalytics.io

*.microsoft.com

*.microsoftonline.com

*.microsoftonline-p.com

*.msauth.net

*.msftauth.net

*.trafficmanager.net

*.visualstudio.com

*.windows.net

*.windows-int.net