Enable Single Sign-On (SSO) between Fogwing CMMS and Microsoft Entra ID (formerly Azure Active Directory) using OAuth authentication. This guide walks you through the Azure configuration required before the Fogwing implementation team completes the integration.
Prerequisites
Before you begin, ensure you have:
Fogwing CMMS Enterprise Subscription
Microsoft Azure Administrator access
Microsoft Entra ID Administrator privileges
Fogwing CMMS Administrator account
Redirect URI provided by the Fogwing support team
Step 1: Register an Application in Microsoft Entra ID
Sign in to the Azure Portal.
Navigate to:
Microsoft Entra ID → App registrations
Click New registration.
Enter the following details:
Field | Value |
Name | Fogwing CMMS |
Supported account types | Single Tenant |
Redirect URI Type | Web |
Redirect URI | Provided by Fogwing |
5. Click Register.
Step 2: Copy the Application Details
After the application is created, copy the following values:
Azure Value | Required by Fogwing |
Application (Client) ID | ✅ Yes |
Directory (Tenant) ID | ✅ Yes |
You'll share these values with the Fogwing implementation team later.
Step 3: Configure API Permissions
Open the registered application.
Navigate to: API Permissions
Add the following Microsoft Graph Delegated Permissions:
emailprofile
After adding the permissions:
Click Grant admin consent
Confirm the consent request
Why is this required?
These permissions allow Fogwing CMMS to authenticate users and retrieve basic profile information during sign-in.
Step 4: Create a Client Secret
Navigate to: Certificates & Secrets
Click New Client Secret.
Enter:
Description
Expiration period
Click Add.
Immediately copy the Client Secret Value.
Important: Microsoft displays the Client Secret Value only once. Store it securely before leaving the page.
Step 5: Share the Following Details with Fogwing
Provide these values to the Fogwing implementation team:
Required Information |
Client ID |
Tenant ID |
Client Secret Value |
These credentials are used to securely configure SSO in Fogwing CMMS.
Step 6: Verify the Redirect URI
Ensure that the Redirect URI configured in Microsoft Entra ID exactly matches the Redirect URI provided by the Fogwing team.
Note: Even a small mismatch will prevent users from signing in successfully.
Step 7: Fogwing Configuration
Once you've shared the required information, the Fogwing implementation team will complete the remaining setup, including:
Microsoft Entra ID integration
OAuth authentication configuration
User sign-in mapping
Tenant configuration
SSO validation and testing
No additional Azure configuration is required after this step.
Validation Checklist
Use the checklist below to ensure everything is configured correctly.
Task | Status |
Application registered | ☐ |
Client ID copied | ☐ |
Tenant ID copied | ☐ |
Client Secret generated | ☐ |
API permissions added | ☐ |
Admin consent granted | ☐ |
Redirect URI verified | ☐ |
Details shared with Fogwing | ☐ |
SSO tested successfully | ☐ |
Troubleshooting
Login fails after Microsoft authentication
Verify that:
The Redirect URI matches exactly.
The Client Secret has not expired.
The Tenant ID is correct.
Admin consent has been granted.
User receives a permission error
Verify that:
Microsoft Graph delegated permissions (
emailandprofile) have been added.Admin consent has been granted.
Authentication redirects back to the login page
Verify that:
The Redirect URI is correct.
The Fogwing SSO configuration matches the Azure application settings.
Information Required by Fogwing
Parameter | Example |
Tenant ID |
|
Client ID |
|
Client Secret |
|
Redirect URI | Provided by Fogwing |
Need Help?
If you have any questions or need assistance with the SSO configuration, contact the Fogwing Support team: 📧 [email protected]