>I think the Title says it all.
>
>Has anybody ever attempted or made their VFP 9 application to do SSO with Azure AD?
>
>TIA

We never did the project, but I spec'd out what would have been required, and in conversations with our hosting service guru, determined it would be quite easy.

We have had SSO authentication in our (my day job for 19 years at DataWorks, Inc) for many years now. The key, as it were, is obtaining the DN (Distinguished Name, think: pathed identification of the user) of the login. In our app we use an AD query to obtain the DN. The rest is baked into our app. Given the DN, we can find the user, and set permissions as we usually do, etc.

What I was assured was that they (the hosting provider who would integrate with a large companies Azure AD replication of a multi-site AD system) could provide the DN to us. The key would be the customer sites, where the changes would be made, on the occurrence of a change on their site sending a list of the employees and their DN's via SFTP/FTPS to the hosting provider. That would enable them to allow only validated logins through their firewall, and they would make the DN available to us.

The user would still have to be added in our system before first use, of course. What this arrangement would do is ensure that users who no longer have access don't get in.

hth,

Hank