[Announcement] Single-sign on using Azure Active Directory released!

[pawan-msft]

We've completed the world-wide roll-out of Single sign-on capability. Single sign-on allows everyone to build bots that silently authenticate users if user's are already signed in on the host page where the chat canvas is deployed. This capability only works with Azure Active Directory at this time. Give it a try!

>> https://docs.microsoft.com/en-us/power-virtual-agents/configure-sso

[RezaDorrani]

Hi @pawan-msft,

This is great news.

My question regarding the html file - What is the recommendation to host this html file?

It must be hosted and available anonymously?

--------------------------------------------------------------------------------
If this post helps answer your question, please click on “Accept as Solution” to help other members find it more quickly. If you thought this post was helpful, please give it a Thumbs Up.

Thanks,
Reza Dorrani, MVP
YouTube
Twitter

[pawan-msft]

Hi @RezaDorrani - It doesn't have to be. Your html file is typically the page where your bot is hosted. Presumably, it's a page that you navigate to once you're authenticated (e.g. an intranet page, etc.).

[RezaDorrani]

Hi @pawan-msft 

SharePoint page would work.

What about MS Teams?

--------------------------------------------------------------------------------
If this post helps answer your question, please click on “Accept as Solution” to help other members find it more quickly. If you thought this post was helpful, please give it a Thumbs Up.

Thanks,
Reza Dorrani, MVP
YouTube
Twitter

[ChristianAbata]

@pawan-msft  excellent very helpful, thank you to share ;D

[pawan-msft]

@RezaDorrani - We haven't tried SharePoint - but theoretically if you can upload custom HTML code snippet, it should work. Since SSO requires client-side custom behavior (intercept login prompt and get OBO token), Teams will not work until they support SSO for bots. We're working with them on enabling this soon - stay tuned.

-Pawan

[RezaDorrani]

Thank you @pawan-msft 

Very excited for SSO.

--------------------------------------------------------------------------------
If this post helps answer your question, please click on “Accept as Solution” to help other members find it more quickly. If you thought this post was helpful, please give it a Thumbs Up.

Thanks,
Reza Dorrani, MVP
YouTube
Twitter

[RezaDorrani]

@pawan-msft 

Keep getting AADSTS500111: The reply uri specified in the request has an invalid scheme. when trying to sign in using the approach mentiond in the documentation.

Followed the documentation link provided.

--------------------------------------------------------------------------------
If this post helps answer your question, please click on “Accept as Solution” to help other members find it more quickly. If you thought this post was helpful, please give it a Thumbs Up.

Thanks,
Reza Dorrani, MVP
YouTube
Twitter

[renatoromao]

@RezaDorrani , you can see this topic: https://powerusers.microsoft.com/t5/General/SSO-in-PVA/m-p/568826#M637