Adding applications to your Active Directory implementation in Azure AD is fairly straight forward. Let me walk you through a setup and show you what you’ll need to do.
First you need sign up for Windows Azure. This part is free, just go to your free azure trial. Note that having an Active Directory in Azure does not cost anything. You can add a limited number of applications under the free version as well but can’t use two-factor authentication.
Next you need to create a directory. The Microsoft MVA I recorded with Anthony Bartolo covers this off way better then I can do here. So go on and watch it, follow along and once you are familiar with that, come on back.
You should now have an Active Directory in Azure. Here is a screenshot of my directories.
Once your users are created and working properly, head over to the applications.
In the applications area, click add in the lower bar on the screen.
Click on Add an application from the gallery
Next search for the application you want. In my case I entered in Quickbooks and searched for it. Find the app, click on it and click the check mark.
Now that you’ve added the application, you need to assign it to the user. The wizard will bring you to this screen. First click on Configure single-sign on.
Here you are going to select Password Single Sign-On then click the check mark.
Next you will go back to the Your app has been added! screen. Click Assign users
Change the sort to users (or if you want to assign to a group, leave it as is). Find the group or user you want, select it and then click ASSIGN.
You will get a warning screen. You have the option of putting in credentials in for the user (great if you don’t want the user to know the underlying password for the application) or the user will be prompted for them first time if you do not.
Next direct the user to myapps.microsoft.com and have the user log in. If you have two-factor authentication on then you will be challenged for the second piece of authentication. Two-factor authentication is available on Azure AD, but it has a cost for each user who needs it. Having two-factor authentication is a great way to lock down your system though.
Once the user logs in you will screen like the following.
Click on the application, in this case Quickbooks and then you will be prompted for Quickbooks credentials if the admin didn’t enter them in and you have not done so yet.
Once you do this, you’ll be good to go.
