SSO - Microsoft Azure Integration

This page will show you how to create an SSO connection to BeeBole Timesheet using Microsoft Azure.
These parameters are just an example. If you have specific protocols in place to define Azure apps, please make sure to add your custom steps to the one described here under.

We also have a default integration with Microsoft SSO via a Microsoft button on the sign in page.
This page add an extra layer would you add BeeBole to your Azure portal and not just use the SSO login via the Microsoft button on our sign in page.

Create a BeeBole Timesheet app

Once connected as an admin to your Azure portal, register a new app under the App Registrations service.

Step 1



Make sure to define the Redirect URI as a Web scenario.
The Redirect URI is https://beebole-apps.com/sso2cb/xxxxxx where xxxxxx should be replaced by your account ID.
You can directly retrieve the URI in your BeeBole account in Settings > Account > OpenID Connect

Once you click on Register, the app will be created and you will land on the app Overview page.


Click on the "Copy" icon appearing next to the Application (client) ID, and paste this client Id in your BeeBole account under Settings > Account > OpenID Connect

Click then on the Endpoints link at the top of the screen to get the API endpoints.
Add the authorization and token endpoints (v2) in your BeeBole account under Settings > Account > OpenID Connect



Step 2

In the next step, click on Branding in the left menu.



Give the app a name, such as BeeBole or BeeBole Timesheet.
Upload a logo of your choice. If you want to use the BeeBole logo, you can use the logo available the following URL.

Define the Home page URL.
The URL is https://beebole-apps.com/sso2cb/xxxxxx where xxxxxx should be replaced by your account ID.
You may get the URL directly in your BeeBole account under Settings > Account > OpenID Connect as the Initiate login URI.

Step 3

Click on Authentication in the left menu.
Make sure to tick the box ID Tokens under the Implicit grant and hybrid flows section.


Step 4

Click on Certificates & secrets in the left menu.
Then create a new client secret.
Copy/paste the value of the new Client Secret you just created in your BeeBole account under Settings > Account > OpenID Connect


Step 5

Make sure to grant the application the right API Permissions and to assign it to the ad-hoc employees/group of employees in the Enterprise Application service.


The app should be made visible to the users in the Properties tab in the left menu to ensure they can see the app in their Access Panel and O365 launcher.



Connect to BeeBole using Microsoft Azure SSO as an employee

The employees assigned to the BeeBole app in your Azure portal will now see a new BeeBole Timesheet app in their Access Panel and O365 launcher.
Clicking on the app will automatically connect them and redirect them to their BeeBole account.