Myma.ai provides OpenID based SSO option that allows Myma.ai Dashboard to connect to an IdP and provide SSO for your users.
Microsoft Entra ID is a cloud-based identity and access management solution. To enable SSO to log into the Myma.ai Dashboard (https://app.bookmebob.com), using your Microsoft Entra ID you need to set up the Myma.ai application in your identity provider.
This is a one-time setup, follow the step-by-step guide to help you set up the application in Azure. Once the setup is complete your staff will be allowed to login to Myma.ai Dashboard only through the Microsoft credentials. The Authorization is managed in Myma.ai, so permissions to parts of the Myma.ai application are still configured in the Myma.ai Dashboard by the Admin privilege users.
Open https://portal.azure.com and select Azure Entra ID. Follow the following steps to set up the Myma.ai application.
Step 1: Register app
Select App registrations in the left-hand menu
Click New Registrations on the top panel
Step 2: Configure initial settings
Under Name enter Myma SSO
Under Supported account types keep the default settings as Accounts in this organizational directory only. Select Other if you require a special setting.
Under Redirect URI, select Web and enter https://login.bookmebob.com/account/ssocallback
Click Register
Step 3: Create Client Secret
Select Certificates & Secrets in the left-hand panel. Then, on the center panel below the Client Secrets, click on New client secret.
Name the new client secret as Myma SSO, and select a proper expiration date. You will not be automatically notified when this client secret expires, so you will need to monitor this on your own.
Click Add.
Copy the secret value to a safe place. You will need it later to send it to the Myma.ai team.
Step 4: Setup permissions
Select API permissions in the left-hand panel
On the center panel, there should already be a default permission entitled User.Read. If not, insert it manually.
Click Add a permission in the center panel. Select Microsoft Graph, then select Delegated permissions.
Check the box for email, then click Add permissions
Step 5: Collect endpoints
Select Overview in the left left-hand panel
Copy the Application (client) ID text, which you will provide to Myma.ai in the next step
Step 6: Share info with Myma.ai
Pass the following information to the Myma.ai team. Please do not email this information. Myma.ai will coordinate a safe way to exchange this information
Application (Client) ID
Tenant Id
Client Secret
Step 7: Myma.ai Setup
Myma.ai will configure the setup so that the SSO is integrated