Setting up SSO with Azure AD

1. Log into your Azure account and go to Azure Active Directory → App registrations →   New registration
2. Name your application  ex. Dailymotion
3. In Supported account type, we recommend selecting Accounts in any organizational directory (Any Azure AD directory - Multitenant)
4. In Redirect URI:
   • Select Single-page application (SPA)
   • Add https://partner.api.dailymotion.com/oauth/v1/sso/login-callback
5. Click Register
6. Copy the Client ID and Tenant ID from the app page
7. Go to the Authentication tab on the left
8. In Implicit grant and hybrid flows, check ID tokens (used for implicit and hybrid flows)
   
9. Save

1. In Azure AD → Enterprise applications, open the app registered in step 1
2. Go to Users and groups →   Add user/group
   
3. Assign a test user to this app
   Make sure about the followings:
   • this user isn't part of your Dailymotion Organization yet
   • it uses your business email domain
   • you have its credentials
   • the "email" field in the user details isn't empty

You can test the login and Just-in-time (JIT) flows once your SSO configuration is set up on your Dailymotion Studio with step 3.

 

Now that you created a new application in your Azure AD account, you can set up SSO in your Dailymotion Studio.

1. Log into your Dailymotion Studio and go to Organization Settings → Single Sign-On → Set up SSO
2. Select Azure AD as your identity provider
3. Paste in the Tenant ID and Client ID retrieved in Step 1.6
4. In Just-in-time user provisioning:
   • Enter your company's email domain
   • Define the default user permission for all new users  Admin or Editor
   • Save

SSO should now be successfully configured on your Dailymotion Organization!

 

Check that your SSO connection is working:

1. Log out of your Dailymotion Studio
2. Enter the test user email assigned in step 2.3 and click Login
   
3. You should be redirected to Azure AD sign in page where you can enter your credentials
4. On the Permissions page, select Consent on behalf of your organization, and click Accept
   
   

You should now be successfully logged in your Dailymotion Studio via your Azure AD SSO set up.

 

You successfully set up SSO on your Dailymotion Studio with Azure AD!

You can now assign users to this registered app in Azure AD.
Make sure that the "email" field in the Azure AD users details isn't empty.

Any assigned user that already exists within your Dailymotion Organisation will be able to login to your Dailymotion Studio with their existing SSO credentials.
Any new user added on-the-fly to your Organization will be automatically provisioned with the default permissions set during SSO setup (step 3.4).

We couldn't find an account matching with the specified email.

Make sure that:

• the email is correct and has been assigned in your Azure AD users list
• you subscribed to our SSO paid feature to have it enabled on your Dailymotion account

Your Dailymotion Organization has reached its user limit. Reach out to your assigned Account Manager.

Enabling SSO on your Dailymotion account is a paid feature. Check with your assigned Account Manager or our Support Team that you subscribed to it.