lithnet / access-manager

Access Manager provides web-based access to local admin (LAPS) passwords, BitLocker recovery keys, and just-in-time administrative access to Windows computers in a modern, secure, and user-friendly way.
Other
238 stars 20 forks source link

Azure AD auth issues. OpenID #190

Closed Chesedro closed 1 year ago

Chesedro commented 1 year ago

Subject of the issue

Trying to setup Access Manager web to auth to Azure AD. Setup seems pretty straightforward, however the line in the instruction for "issuer/Authority" seems it should be something more like "https://login.microsoftonline.com/TenantID" but this does not work. It seems what ever I add into this field and then save it. The AM Web portal won't load at all. I then move it back to "integrated Windows Auth" and the Page loads just fine. So My two questions are. Am I using the correct "issuer/Authority" and or am I missing something on the server hosting the web portal that is needed for OpenID to work properly?

Also Note: that if you open Azure ad and go to the newly created App registration. Click "Endpoints" there is a dedicated endpoint for "OpenID" I have tried this one too with he same result. no luck.

Thanks for all your help

T

ryannewington commented 1 year ago

@Chesedro

Here's the screen shot of a working setup image

What version of AMS are you running?

You should be able to find more information in the log files at c:\Program Files\Lithnet\Access Manger Service\logs for specific details on what is failing.

Chesedro commented 1 year ago

Thanks for getting back to me. I feel stupid now. I did add that just as you posted and right away I got the login and was able to log in via Azure. I thought I had tried that the first time with no luck.. guess I was dreaming. Thanks so much for your time.

T

ryannewington commented 1 year ago

No problem! Glad it all working!