Summary
Learn how to enable Azure SSO for Box+Dice users, streamline authentication and replace standalone Box+Dice login credentials with Microsoft‑based sign‑in.
This article covers:
- About Azure SSO for Box+Dice
- Register application
- Configure the client secret
- Add your client secret to Box+Dice
- Add redirect and logout URLs
About Azure SSO for Box+Dice
Azure single sign‑on (SSO) allows users to access Box+Dice using their existing Microsoft Azure credentials. This removes the need for separate Box+Dice passwords and provides a more secure, efficient authentication experience. Administrators configure Azure SSO so their team can use a single identity across their systems.
Register application
Before connecting to Box+Dice, you must register a new application in Azure and gather essential IDs and secrets.
To register the application:
Sign in to the Azure portal
Select the Directory + Subscription icon in the portal toolbar
Select the directory that contains your Azure AD B2C tenant
In the Azure portal, search for and select Azure AD B2C
- Go to Applications and click New registration
- Enter an application name of your choice
- Click Register to create the application
Configure the client secret
Azure requires a client secret so Box+Dice can authenticate securely.
To create a client secret:
Click Certificates & secrets
- Click New client secret
- Set Expires to Never
Add your client secret to Box+Dice
Once Azure generates the key details, add them to Box+Dice so the systems can communicate.
To add the Provider Secret:
Copy your Client secret from Azure
In Box+Dice, Go to: Settings > General > Single Sign-on (SSO)
Locate the Provider Secret field
Paste the client secret into the field
- Copy the Application (client) ID from Azure
Paste it into the Provider ID field in Box+Dice
- Copy the Directory (tenant) ID from Azure
Paste it into the Provider Tenant ID field in Box+Dice
- Click Save
Add redirect and logout URLs
Box+Dice relies on specific redirect URLs to ensure sign‑in and sign‑out work correctly.
To add redirect settings:
- In Azure, open Authentication and click Add the redirect URLs
Click Add a platform
Select the web platform application
Fill in the Redirect URIs and Logout URL and check the two implicit grant flows:
- Ensure you put in exactly Redirect URLs (must include https):
- https://{your subdomain}.boxdice.com/auth/azure_activedirectory_v2/callback
-
https://{your subdomain}.boxdice.com.au/auth/azure_activedirectory_v2/callback
(where {your subdomain} is the subdomain you use to access Box+Dice)
- Ensure you put in exactly Logout URLs (must include https):
https://{your subdomain}.boxdice.com/auth/azure_activedirectory_v2/logout
(where {your subdomain} is the subdomain you use to access Box+Dice) Click Configure
Save your SSO settings
Your users should now be able to sign in using their Microsoft credentials.