Office 365 Integration

Administration
1

I was doing a search how to integrate Gibbon installation with Teams, and suddenly version 23 notification popped in… :smiley:

It sounds very promising, but there is no documentation about it…

I tried activating it, enabled API but its on login loop.

Second, I have staff and students who have Azure ids, will it be possible that Gibbon and Azure ids can be merged? (I am using the same userid as login for gibbon separately :: just to be clear, without any sort of integration enabled… userid@teamsdomain.com’s userid i create for gibbon user, and their userid@teamsdomain.com is their contact email.

2

Hi Sam, thanks for the heads up, it’s a brand new feature and we’ll work on updating the documentation.

To get started, be sure to login at https://portal.azure.com then go to Azure Active Directory | App registrations to create a new app. Once you’ve created it, you’ll be able to access the Application (client) ID as well as create a Client Secret. Copy these and paste them in the relevant fields in System Admin > Third Party Settings > Microsoft SSO. You’ll need to copy the Redirect URI from Gibbon and register it back in the Azure application under Redirect URIs.

Hope this helps you get stated. For the login to work, the email for users in Azure will need to match the email for users in Gibbon (and will need to be unique in Gibbon).

3

Hi Sandra;

Well, I followed all the steps, but for sign in, it goes on loop, like after i sign in my test account, it goes back to the login page…

4

Hi Sam, have you registered the Redirect URI with the Azure side of the authentication loop? If so, I wonder if its returning an error that we’re not seeing. Can you check your System Admin > View Logs for any login failures, and expand them to see if a reason is provided.

5

Sorry i missed your reply :slight_smile: a lot of dishes i am cooking so skipped that one… I will check that later today and let you know…

6

Hello Ross,

I had the same problem with the poster, It is keeping a loop, and refreshing the page.

Kind regards,

Butters

7

Hi Butters, have you tried Sandra’s advice of February 7th, in the post above? Ross

8

Hello Ross,

I just managed to access Gibbon by Microsoft login. But TBH, it is not easy to log in, and it is having the chance to go loop. I guess it is because of the cookies? I guess it also comes through the problem with the Microsoft function when Microsoft always asks you to keep the login status most of the time. I am not sure what exactly part caused it.

Sorry, I am not the developer, that is the only thing I could provide for you.

Kind regards,

Butters

9

Hi Butters. I haven’t found that the redirect goes in a loop when fully configured, so I wonder if it could be local cookies, you could try clearing them and check. Be sure to also double-check that the redirect URL is correct and doesn’t have any extra characters or spaces.

Microsoft asking to login again is unfortunatly something outside our control, as it’s part of their storage and management of cookies for SSO purposes.

10

Hi Sandra;
I uninstalled Gibbon on my system due to this very problem. I am beta testing your new version (24.0) now. I reconfigured everything again. and still the same problem (at this time i am using chrome, but will check on other browsers if the same problem exists). and yes, the problem is same in all browsers.

11

Hi Sam72, have you checked to see that your redirect URL is registered on the Microsoft side, as it won’t redirect properly unless it has been registered. Otherwise, please see if you can check the PHP logs as well as the View Logs page in System Admin, if there are any specific errors in the OAuth process they should generate a log that could help us identify the issue.

12

okay i will check it out

13

I rechecked all settings, reset the configuration, and tried again, same error. in System Admin, View Logs, I see no information about OAuth process.

14

I’m having the same problem too, but I realise that it is redirecting to this error URL:

https://www.OUR_WEB_ADDRESS/login.php?error=invalid_request&error_description=AADSTS50194%3a+Application+%27f07e2e9f-1b8b-41a3-986f-9d188ffc0482%27(Gibbon)+is+not+configured+as+a+multi-tenant+application.+Usage+of+the+%2fcommon+endpoint+is+not+supported+for+such+applications+created+after+%2710%2f15%2f2018%27.+Use+a+tenant-specific+endpoint+or+configure+the+application+to+be+multi-tenant.%0d%0aTrace+ID%3a+8e36b1b6-9a09-434c-b670-502b6a3c0000%0d%0aCorrelation+ID%3a+7851afa4-3808-4ec0-9f3d-f672c85090d2%0d%0aTimestamp%3a+2022-07-17+20%3a26%3a12Z&state=28f72f3e29ca4afebfb1852cf06ea06d#

I don’t know if this helps at all? Many thanks,

Ed.

15

Okay, I’ve followed this up and got it working now.

  1. Go into Azure > Azure Active Directory > Your Tenant.
  2. Select App Registrations > Gibbon > Authentication.
  3. Scroll down and change ‘Supported account types’ to ‘Accounts in any organizational directory (Any Azure AD directory - Multitenant)’.
  4. Click Save.

Not entirely sure what is going on, as I only really want users of my tenant to be able to access it, but it may be something to do with Office 365. Anyhow, it’s a way forward. I found this solution here:

https://stackoverflow.com/questions/53526121/use-a-tenant-specific-endpoint-or-configure-the-application-to-be-multi-tenant

Many thanks,

Ed.

16

Thanks for sharing your solution! Glad to hear you got it working.