Azure Single Sign-On for DFME

The Basics

Before the inception of more modern authentication and single sign on, Users would directly authenticate from their Client or Clients, to the Server or Servers hosting the Applications they wanted to access, using a username and password.

Modern authentication introduces an additional and more secure element to Client/Server communication, with integration to a Third Party Identity Provider or IdP. IdPs offer consolidated, cloud-based identity and access management systems that work to grant or deny access across Applications and their interfaces.

If using an IdP, a Username and Password is no longer sent and validated directly between the Client and Server. Instead, the Client retrieves a security token from a given and trusted IdP. This token is then presented to the Server, which has its own trusted relationship with the IdP. The Server uses the signing key of the IdP to check the cryptographic signature of the token to ensure its validity before granting or denying access to the Application.

Third Party Identity Support

The Maconomy Essentials Cloud (DFME) offering supports single sign-on using Microsoft Windows Azure Active Directory.

This provides authentication across all Maconomy Interfaces, including its User Interfaces (Workspace Client, iAccess and Touch).

Customers bear complete responsibility for setup, support and maintenance of their Azure Active Directory solution.

The DFME setup will always use name mapping for the Azure integration.

More detailed technical information pertaining to the integration requirements can be found in the Azure Setup Guide.

Integration to Other Deltek Products

The Maconomy Essentials Cloud (DFME) offering can include other elements integrated into the core Maconomy solution such as Business Performance Management (BPM) and People Planner. Maconomy uses Trusted Authentication to authenticate seamlessly between core Maconomy and these other elements. This means that Users authenticate to Maconomy via one of its User Interfaces, and Maconomy in turn handles authentication to the other product or products.

Direct SSO to these products is not supported.