Entra ID / Azure AD SSO for Quickchannel Console
The Quickchannel Console supports single sign-on with Azure Active Directory / Microsoft Entra ID. Quickchannel also supports access rights for watching videos using this integration. This article covers the process of how to set up a connection between your Azure AD / Microsoft Entra ID and Quickchannel Console.
In order to set up single sign-on with Azure AD for the Console, you need to be Administrator on your Azure Active Directory and Administrator on the Quickchannel Account you are connecting to.
Connecting Azure AD to Quickchannel
Login to the Quickchannel Console and navigate to the Connections section of the Settings, choose the Singe Sign-on tab and press Connect to Azure AD.
You will be taken to Microsoft page to login and verify that you wish to give the Console access to your Azure Active Directory.
Role mapping
After connecting Azure AD to your account you can specify which users and groups will be able to access the Console and which Quickchannel user role to assign them.
If you wish to use group membership to restrict media playback you must also add the Viewer role to these groups.
In the Azure Portal on the "Azure Active Directory" page under "Manage" choose "Enterprise applications", find and select the application named "Quickchannel" in the list. When on the application page choose "Users and groups". There you are able to map users and groups to the different user roles in the Quickchannel Console and the special Viewer role for the group membership security restriction.
Done
Now that your Azure Active Directory is connected to your Quickchannel Account, your users can login using their Microsoft account.
Notes
If you connect the same Azure AD to multiple Quickchannel Accounts, users cannot be set to have different roles on separate accounts.
The users assigned to the account are visible in the Settings -> Users -> Federated Users panel.
Adding Groups
Once an AD has been connected and the Viewer role has been assigned to one or several groups, these groups will automatically be created when first seen. I.e. when a user logs in to the Quickchannel Console using SSO or logs in for the security restriction SSO challenge and is a member of these groups, they will be stored within Quickchannel to be able to manage access. For groups not previously seen there is an option to add those here.
Groups visibility can be controlled here and previously added or seen groups can also be removed.