Azure Active Directory Authentication

1.0 Introduction

This feature allows users to configure Fortanix Confidential Computing Manager (CCM) accounts to authenticate using Azure Active Directory (Azure AD) from an Azure tenant. The authentication process uses the OpenID Connect protocol built on OAuth 2.0.

2.0 Prerequisite

Users must sign up for Fortanix CCM or be invited to an existing CCM account before they can log in to the account using Azure AD.

3.0 Setting Azure Active Directory Authentication

Perform the following steps to add Azure AD as the OAuth identity provider:

1. In the CCM UI left navigation panel, click the Settings → Authentication menu item.

   

2. On the Authentication page, enable the toggle for Microsoft Entra ID to allow users to log in to the Fortanix CCM account and authenticate using single sign-on with Microsoft Entra ID credentials.

   

3. Click SAVE to save this setting.  

4. When the toggle is disabled, users will not be able to authenticate using Microsoft Entra ID credentials. They can still authenticate to their Fortanix CCM account using the email address and password provided during user signup.

5. Now when the user logs in to Fortanix CCM in the next session, there will be two options shown on the login screen:

   1. Log in with Azure AD (with SSO)

   2. Log in with Password (Without SSO)