Set Up Single Sign-On for Vantagepoint with Microsoft Azure Active Directory

Microsoft Azure Active Directory’s single sign-on (SSO) feature enables users to log on to Vantagepoint using their Windows usernames and passwords, instead of using separate Vantagepoint usernames and passwords.

Vantagepoint supports the single-tenant and multi-tenant options for registering an application within the Azure portal. This includes invited users from another tenant or domain. Application registrations using personal Microsoft accounts (for example, Skype or Xbox) are not supported.

Alternative Approach

The most common single sign-on model used by Vantagepoint customers is to synchronize users and passwords to Windows Azure Active Directory.

An alternative method is to set up Windows Azure Active Directory to federate back to your local Active Directory via ADFS (Active Directory Federation Services), to authenticate users via your on-premises Active Directory. With this model, you do not need to synchronize users and passwords to Windows Azure Active Directory.

Important Information to Know

Periodically, Microsoft may change the behavior and the management of settings in the Microsoft Azure portal. Deltek strives to maintain accuracy in documenting the steps for configuring the Deltek applications that use the Azure Portal. Sometimes, the changes made in the portal may occur prior to the respective updates in the Deltek documentation. If this occurs, please contact a Deltek Customer Care Rep to ensure that you have the updated steps.

On-Premises Deployments

The steps to configure Vantagepoint with SSO for on-premise deployments are the same as Vantagepoint hosted in the deltekfirst.com cloud with one difference: the Vantagepoint launch page URL (https://<FQDN>/vantagepoint) will be used in place of the customer URL that is specified in the reply URL settings (https://abcengineers.deltekfirst.com/abcengineers).

For example, if your Vantagepoint server is named webserver1 in your applebartlett.com domain, then your customer URL per the instructions would be https://webserver1.applebartlett.com/vantagepoint.