SSO Changes Required For Upgrading to Identifi 9.4

 SSO Configuration Changes Required When Upgrading to 9.4

Why:  In 9.4, all pages related to logging into Identifi were rewritten in a more modern technology.  The functionality did not change, however as a result of this rewrite, the associated urls are different and therefore the new url needs to be added to the SSO Configuration.  This applies to both Azure and Okta. 

It is HIGHLY recommended that these changes be made prior to upgrading to 9.4, in order to avoid any disruption post-upgrade.  You can also consider turning on mixed authentication temporarily in case there is an issue with the SSO configuration.  This would allow users to log on with their private credentials until the issue is resolved. 

Identifi Installation Configuration Changes

In 9.4, the Single Sign-on tab under the Installation menu will present a new SPA Redirect URI field.  Note that the SPA Redirect URI is the installation's URL plus /spa/web-ui/sso-landing/[installation name]

Ahead of your upgrade to 9.4, determine what the installation's SPA Redirect URI will be, then follow the instructions below for updating your Azure configuration.

Example: If the Redirect URI is https://devbuild8.int4/identifi.net/sso/inttest  then the SPA Redirect URI will be https://devbuild8.int4/identifi.net/spa/web-ui/sso-landing/inttest  

Please note that the URI should be in lowercase.

Azure Instructions

With the SPA Redirect URI for your installation ready, login to your Azure portal.

1. Click on Azure Active Directory
2. Then select App Registrations from the menu and then select your application from the list. 
3. Once you open your Application click on the link next to the Redirect URIs, select Add a Platform then Single-page Application
4. Enter the SPA Redirect for your installation and click Configure.

This completes the necessary changes.  As mentioned above these changes can be implemented prior to the upgrade to 9.4 and are highly recommended.