Azure AD with Splash Access

Overview

Splash Access integrates with Microsoft Azure Active Directory (Azure AD) to allow users to authenticate using their Office 365 credentials. This setup requires creating or selecting an Azure App Registration and configuring authentication details so Splash Access can securely redirect users for login.

Steps to Configure Azure AD with Splash Access

1. Log in to the Microsoft Azure Portal: https://portal.azure.com
2. Navigate to Azure Active Directory and select App Registrations.
3. Click on your existing application (e.g., SplashAccess) or create a new Web app / API application.

4. Copy the following values from the App Registration overview page:

   • Application (client) ID
   • Directory (tenant) ID

   In Splash Access, go to Settings > System > Azure Settings and paste these values into the corresponding fields.

5. Return to App Registrations > Authentication > Redirect URIs and add the following URLs:

    

   https://wifi.splash-access.com/social.php
   https://server1.splash-access.com/social.php
   https://server2.splash-access.com/social.php
   https://campuswifi.net/social.php
   https://server1.campuswifi.net/social.php
   https://server2.campuswifi.net/social.php
   

6. Enable the following options:
   • ID Tokens (used for implicit and hybrid flows)
   • Accounts in this organisational directory only (Single tenant)
7. Navigate to Certificates & secrets.
8. Generate a new client secret for Splash Access.
   • Set Expires to Never.
   • Store this key securely.
9. Copy the generated Client Secret Value and paste it into the Secret Key field in Splash Access under Azure Settings.

Additional Information

• Ensure all redirect URIs are entered exactly as shown to avoid authentication failures.
• The client secret should be stored securely, as it provides access to your Azure AD integration.
• If authentication fails, verify that the App Registration is set to Single tenant and that ID Tokens are enabled.