1. Introduction

The AURORA Portal supports Microsoft Single Sign-On (SSO), allowing users to access the portal using their existing Microsoft corporate credentials without maintaining a separate password.

There are two methods available for using SSO within the portal:

This guide explains both methods in detail.

2. Prerequisites

Before configuring SSO, ensure the following requirements are met:

• The user has an active Microsoft 365/Azure AD account.
• The user's email address in AURORA matches their Microsoft account email address.
• Browser pop-ups are enabled.
• The user belongs to the organization's Azure AD tenant.
• The user has permission to access the AURORA Portal.

Supported Browsers

• Google Chrome
• Microsoft Edge

Note: Browser pop-ups must be allowed for Microsoft authentication windows.

3. First-Time Login

Before enabling SSO, users must first log in to the AURORA Portal using the existing email address and password.

Steps

1. Open the AURORA Portal.
2. Enter your registered email address.
3. Enter your password.
4. Click Login.

You will be redirected to the AURORA Portal home page.

Note: First-time login must be completed using email and password. SSO can only be enabled after successful login. The user can user either SSO(Single Sign on) or MFA(Multi Factor Authentication)

4. Enabling SSO or MFA from Your Profile

After logging in, users can link their AURORA account with their Microsoft account. Once linked, future logins can be performed using Microsoft SSO. 

4.1 Open Profile

1. Click your profile icon or username in the top-right corner.
2. Select Profile from the menu.

The View/Edit Customer Profile page opens.

Profile Page

4.2 Locate the Two Factor Authentication Section

Scroll to the bottom of the Profile page.

The following options will be displayed:

 Two Factor Authentication Section with ENABLE SSO Button

4.3 Enable SSO

Important – SSO and Multi-Factor Authentication (MFA)

Once Single Sign-On (SSO) is enabled for a user account, the AURORA Portal's built-in Multi-Factor Authentication (MFA) functionality is automatically disabled for that user.

Authentication and any additional security verification are then managed entirely by Microsoft Azure Active Directory (Azure AD).

If your organization has Microsoft MFA enabled, users will continue to be challenged for MFA during the Microsoft sign-in process based on the organization's Azure AD security policies.

Therefore:

• AURORA MFA and Microsoft SSO cannot be used simultaneously.
• When SSO is enabled, Microsoft Azure AD becomes the primary authentication provider.
• Any MFA requirements must be configured and managed through Microsoft Azure AD.
  

Warning:

When SSO is enabled, the AURORA Portal's native MFA feature is disabled. Users will authenticate through Microsoft Azure AD, and any MFA prompts will be controlled by the organization's Microsoft security policies.

Steps to Enable SSO

1. Click ENABLE SSO.
2. A Microsoft authentication window appears.
3. Enter your Microsoft account credentials.
4. Complete any Multi-Factor Authentication (MFA) challenge if prompted.
5. Grant requested permissions if prompted.
6. Authentication completes successfully.
7. Your AURORA account is now linked to Microsoft Azure AD.

Microsoft Sign-In Screen

Microsoft Consent/Permissions Screen

Successful SSO Linking Confirmation

Expected Outcome

Your account is now mapped to your Microsoft identity. For future logins, use the Sign in with Microsoft option available on the login page.

5. Importing Users from Azure AD (Administrator)

Administrators can import users directly from Azure Active Directory and invite them to access the AURORA Portal.

Imported users will authenticate exclusively through Microsoft SSO.

5.1 Open Users Page

1. Navigate to the left menu.
2. Select Users.

The Users page opens displaying all existing users.

Users Page with INVITE USER and IMPORT FROM AD Buttons

5.2 Import Users from Azure AD

1. Click IMPORT FROM AD.
2. A Microsoft authentication window appears.
3. Sign in using your Microsoft administrator account.
4. Grant required permissions if prompted.
5. The system retrieves users from Azure Active Directory.
6. Select the users to be invited.
7. Click Invite or Confirm.
8. Invitations are sent to selected users.

Microsoft Authentication Window

Azure AD User Selection Screen

Invite Confirmation Screen

5.3 Verify Imported Users

After import, the Users page displays user status information.

Imported Users with Azure Status

Important: Imported users do not receive a separate portal password and must use Microsoft SSO to access the application.

6. How Imported Users Sign In

Once invited, users can access the portal using Microsoft authentication.

Steps

1. Open the AURORA Portal login page.
2. Click Sign in with Microsoft.
3. Enter Microsoft credentials.
4. Complete MFA verification if required.
5. Access is granted automatically.

Login Page Showing Sign in with Microsoft

Figure 13 – MFA Verification Screen

Successful Portal Login After SSO

Note: No separate AURORA password is required for imported SSO users.

7. Signing Out

Signing out terminates both the AURORA Portal session and the Microsoft SSO session.

Steps

1. Click your profile icon.
2. Select Sign Out.
3. Wait for Microsoft logout processing.
4. You are redirected to the login page.

Sign Out Menu Option

Logout Confirmation/Login Page

Important: Always use Sign Out instead of closing the browser window, especially on shared devices.

8. Troubleshooting

9. Frequently Asked Questions (FAQ)

Can I disable SSO later?

Please contact your system administrator or DataTracks Support.

What happens if my Microsoft email address changes?

The Azure AD mapping may need to be updated by an administrator.

Can imported users reset their AURORA password?

No. Imported users authenticate directly through Microsoft and do not maintain a separate AURORA password.

10. Quick Reference

11. Support

For assistance with Single Sign-On configuration, user provisioning, or login issues, please contact the DataTracks Support Team.

 Customercare@datatracks.com