The provided steps guide you through the process of setting up Microsoft Single
Sign-On (SSO) for Odoo using Azure Active Directory (Azure AD). Below is a
summary of the steps:
Azure Portal:
Go to the Azure Portal and navigate to “Azure Active Directory.”
App Registrations:
Under “App registrations,” create a new registration with an appropriate name,
selecting “Accounts in any organizational directory (Multitenant).” Click
“Register.”
Application (Client) ID:
In the newly created application, go to the “Overview” menu and copy the
Application (Client) ID.
API Permissions:
Set necessary permissions under “API Permissions” and click “Update
Permissions.”
Certificates and Secrets:
Under “Certificates and Secrets,” generate a new client secret key, and copy the
generated value.
Redirect URIs:
In the “Overview” menu, configure Redirect URIs by adding a platform (Web
Applications) and specifying the Redirect URI. This URI should be copied from
Odoo’s system parameters (‘web_base_url’ + ‘auth_oauth/microsoft/signin’).
Users Configuration:
Ensure that all Odoo users are added to the Azure Portal users. Bulk user import
options are available on Azure for convenience.
Email Domain Verification:
Add and verify the email domain before Odoo login. Go to Domain names, click on
“Add custom domain,” add details to the DNS, and verify.
Odoo Configuration:
Activate the developer mode in Odoo settings. Navigate to “OAuth Providers” and
select “Microsoft OAuth2.” Add the previously copied Microsoft Client ID and the
Secret Key
Log in with Microsoft:
Click on “Log in with Microsoft” in Odoo and enter the Microsoft credentials
Successful Authentication:
Upon successful authentication, you will be redirected to Odoo. These steps
provide a comprehensive guide to integrating Microsoft SSO with Odoo, enhancing
security, and simplifying the user authentication experience. Ensure that the
Redirect URI, permissions, and user configurations are accurately set to achieve
successful integration.