- Dynamic Role Assignment: Automatic role assignment can be made to users within the system based on user information returned from Azure (e.g. domain-based roles).
- Integration with User Registration: If users logging in with their Azure ID do not exist in the system, they can be automatically registered in the system with the ‘Save User’ action.
- Post-Login Redirection: After the user logs in with their Azure account, they can be redirected to different screens according to their role or permissions.
- Security Policies: Multi-factor authentication (MFA) or device compatibility checks defined in Azure AD can work in an integrated manner with the Kuika application.
Technical Risks and Precautions
- Azure AD Configuration: The application must be correctly registered on the Azure AD side (settings such as Client ID, Tenant ID, Redirect URI must be defined completely).
- Unauthorised User Login: User information from Azure AD should be compared with the list of authorised users in Kuika, and only authorised users should be allowed to access the application.
- Data Matching: If the user information obtained from Azure does not match the user profile in the system, synchronisation issues may occur. If necessary, matching fields (e.g. email) should be defined in advance.
The Sign In With Azure action enables corporate users to log in quickly, securely, and seamlessly with their Microsoft Azure Active Directory credentials on the Kuika platform. It is especially preferred in internal systems or structures that use SSO (Single Sign-On) architecture. It offers a flexible and powerful user authentication infrastructure along with processes such as post-login redirection, user registration, and role assignment.
