# אימות Azure AD ויצירת חשבון משתמש
**URL:** https://meta.discourse.org/t/azure-ad-authentication-and-creation-of-user-account/199267
**Category:** Support
**Created:** [5 באוגוסט, 2021, 1:21pm UTC](https://meta.discourse.org/t/azure-ad-authentication-and-creation-of-user-account/199267 "2021-08-05T13:21:22Z")
**Posts on this page:** 7
**Page:** 1
### Author:  [@Sundaram\_Das](https://meta.discourse.org/u/Sundaram_Das)
#### Post date: [5 באוגוסט, 2021, 1:21pm UTC](https://meta.discourse.org/t/azure-ad-authentication-and-creation-of-user-account/199267/1 "2021-08-05T13:21:22Z")
Hi Team,
I am using discourse in our organization and have a requirement to enable SSO using Azure AD. is there a guide on how I can enable single sign-on using Azure AD? Also, I have one more requirement, normally in discourse if I use username password-based authentication, then users can register and create their account on the forum but in the case of Azure AD SSO, how the profiles will be created automatically while login and it will be mapped to a particular group based on some Azure AD group? Is there a way I can create the user account in the forum automatically while login in to the forum using Azure AD SSO and automatically map the user with some group based on Azure AD Group name?
Regards,
Sundaram
---
### Author:  [@Sundaram\_Das](https://meta.discourse.org/u/Sundaram_Das)
#### Post date: [9 באוגוסט, 2021, 7:27am UTC](https://meta.discourse.org/t/azure-ad-authentication-and-creation-of-user-account/199267/2 "2021-08-09T07:27:44Z")
Any help on this is much appreciated.
---
### Author:  [@david](https://meta.discourse.org/u/david)
#### Post date: [9 באוגוסט, 2021, 9:25am UTC](https://meta.discourse.org/t/azure-ad-authentication-and-creation-of-user-account/199267/3 "2021-08-09T09:25:00Z")
> [@Sundaram\_Das](#):
>
> is there a guide on how I can enable single sign-on using Azure AD?
A number of people have seen success with the OpenID Connect plugin. There is a short section about Azure AD at the bottom of the first post here:
> [@Discourse OpenID Connect (OIDC)](https://meta.discourse.org/t/openid-connect-authentication-plugin/103632):
>
> discourse2Summary Discourse OpenID Connect allows an OpenID Connect provider to be used as an authentication provider for Discourse.open_bookInstall Guide This plugin is bundled with Discourse core. There is no need to install the plugin separately. Features The plugin aims to provide a minimal implementation of [the specification](https://openid.net/specs/openid-connect-basic-1_0.html). Specifically, it supports the “Authorization Code Flow”. To get started, follow [the plugin installation instructions](https://meta.discourse.org/t/install-plugins-in-discourse/19157), or contact your hosti…
> [@Sundaram\_Das](#):
>
> if I use username password-based authentication, then users can register and create their account on the forum but in the case of Azure AD SSO, how the profiles will be created automatically while login
By default, people will click “Login” in Discourse, be directed to Azure. When they return to Discourse they will be shown the signup form (which is the same as the regular signup form, minus the password field). There are various site settings you can use to control the signup behaviour.
> [@Sundaram\_Das](#):
>
> will be mapped to a particular group based on some Azure AD group
Group synchronisation isn’t supported at the moment. You might be able to achieve something by building an integration with the Discourse API.
---
### Author:  [@Sundaram\_Das](https://meta.discourse.org/u/Sundaram_Das)
#### Post date: [10 באוגוסט, 2021, 9:42am UTC](https://meta.discourse.org/t/azure-ad-authentication-and-creation-of-user-account/199267/4 "2021-08-10T09:42:28Z")
Thank you for your response this really helps.
---
### Author:  [@Sundaram\_Das](https://meta.discourse.org/u/Sundaram_Das)
#### Post date: [10 באוגוסט, 2021, 12:00pm UTC](https://meta.discourse.org/t/azure-ad-authentication-and-creation-of-user-account/199267/5 "2021-08-10T12:00:31Z")
Is there anything we have a plan down the line for this type of requirement?
---
### Author:  [@david](https://meta.discourse.org/u/david)
#### Post date: [10 באוגוסט, 2021, 12:29pm UTC](https://meta.discourse.org/t/azure-ad-authentication-and-creation-of-user-account/199267/6 "2021-08-10T12:29:47Z")
For the group sync? We don’t have any specific plans for Azure, or OpenID Connect. However we are working on a general framework, which may open the door to adding Azure support in future. The technical details can be found here:
> [@Managing group membership via authentication](https://meta.discourse.org/t/managing-group-membership-via-authentication/175950):
>
> @david Continuing the discussion from As you probably can guess, I’m also keen to see a stable solution to this problem, which is not specific to the openid-connect plugin. Let’s see if we can figure out a way forward To pick up on the point you’ve raised. How do you decide which groups to add and remove the user from? And how does that affect manually adding/removing users from groups in Discourse itself? a user authenticates via OIDC with groups ['group1', 'group2'] In the discourse UI…
---
### Author:  [@david](https://meta.discourse.org/u/david)
#### Post date: [11 באוגוסט, 2021, 7:00am UTC](https://meta.discourse.org/t/azure-ad-authentication-and-creation-of-user-account/199267/7 "2021-08-11T07:00:07Z")
This topic was automatically closed after 20 hours. New replies are no longer allowed.