Articles dans cette section

Configurer Azure AD pour l’utiliser avec Extensis Connect (en anglais)

Avatar
Don J.
  • Mise à jour

Cet article n’est disponible ni en français. En consultant cet article, vous contribuez à notre réflexion sur sa traduction future.

Si vous avez besoin de plus d’aide ou si vous avez des questions relatives à l’assistance, veuillez contacter notre équipe dédiée d’assistance en français à l’aide de ce formulaire : https://help.extensis.com/hc/fr/requests/new

Tip: Before configuring a directory service to use with Extensis Connect, alert your users that the change is coming. Being confronted with a different login can be confusing for users, especially in the Connect Fonts desktop app.

For instance, if you are adding Azure AD support, let users know say, a day in advance and then shortly before and immediately after the change, that they will see a Microsoft login and will need to log in to Connect with their network credentials.

Adding Extensis Connect to Azure AD

Note: In these steps, we recommend using a temporary document to make note of several security strings you will need to complete your setup. However you choose to do this, be sure to keep your document or note secure, and delete or destroy it if necessary when you are finished.

  1. Sign in to the Azure portal: https://portal.azure.com/

  2. Under Azure services, click App registrations.

    If App registrations is not visible, click More services and use the Search field, or scroll down to the Other group.

  3. Click New registration at the top left of the window.

  4. Enter Extensis Connect for the Name of the app.

    You can have multiple versions of the same app, just use different names (such as Extensis Connect - Marketing).

  5. Under Supported account types, select Accounts in this organizational directory only (tenant_name only - Single tenant).

  6. Under Redirect URI, choose Web from the Select a platform menu, then enter https://auth.extensis.com/oauth2/v1/authorize/callback in the path field.

    Although the Azure page says this is optional, Extensis Connect requires this information.

  7. Click Register at the bottom left of the window.

    After a few seconds the screen changes to your app registration details.

  8. Click Certificates & secrets in the pane on the left.

  9. Click New client secret near the center of the screen (above the empty list).

  10. Enter a description for the secret.

  11. Use the Expires pop-up menu to choose when the secret will expire.

    Note: To continue using the application, you will need to renew the secret before it expires.

  12. Click Add at the bottom left of the client secret pane.

  13. Click the Copy icon next to the secret Value to copy it, then paste it to a temporary document.

    If you don’t copy it at this point, it will be hidden and you will need to re-create it.

  14. Click Overview (at the top of the left panel).

  15. Copy the Application (client) ID and Directory (tenant) ID to a temporary document.

Restricting access to specific users or groups

The following steps are optional. Complete them if you would like to restrict access to the Extensis Connect app to a subset of your users or groups.

  1. Choose Home from the “hamburger” menu at the top left of the window.

  2. Under Azure services, click Azure Active Directory.

    (If Azure Active Directory is not visible, click More services.)

  3. Click Enterprise applications (in the left pane).

  4. Click the Extensis Connect app from the list (look for the app name that you entered in step 4 above).

  5. Click Properties (in the left pane).

  6. Toggle Assignment required to Yes.

  7. Click Save near the top of the window.

  8. Click Users and groups (in the left pane).

    (Your Azure license may only allow assigning users.)

  9. Click Add user/group at the top of the window.

  10. In the Add Assignment window, click None Selected under Users and groups at the left

  11. Click any users or groups that you want to assign to your application, then click Select at the bottom left of the Users and groups pane.

  12. Click Assign in the Add Assignment window.

Adding Azure AD to Extensis Connect

Once you have created the Extensis Connect application in Azure AD, you need to enter your app’s Azure information into Connect.

  1. Log in to Extensis Connect at https://connect.extensis.com/administration/directory_service.

  2. If it is not already open, click Directory Service.

    If the Directory Service category is not present, it probably means that you are logged in using an account that has not been granted access to the Directory Service module.

  3. Under step 2 of Domain Verification, copy the string that starts with “extensis-domain-verification”. You need to add this string to your domain registrar.

    It should only take a few minutes for the DNS change to take effect, but may take up to 48 hours.

  4. After a few minutes, enter your domain name into the Domain field and click Add & Verify Domain.

    Connect adds your domain to the list of accessible domains.

    Click Verify to verify a domain, or click Remove to remove it from your list.

    Note: To add multiple domains, add the same “extensis-domain-verification” string to each domain registrar, then add and verify each domain.

  5. Click Azure AD.

  6. Enter the three pieces of information that you copied when setting up Azure AD:

    • Directory (Tenant) ID

    • Application (Client) ID

    • Client Secret Value (click to show the value or to hide it)

  7. Click Save & Test Connection.

    If you get an error, make sure that you have entered the correct information into each field.

Congratulations!

The next time any designated user logs in to Extensis Connect, they will see a Microsoft login dialog, and will need to use their domain credentials to log in.

Articles associés