The EmpowerID SSO framework allows you to configure Yammer as an identity provider (IdP) for EmpowerID. EmpowerID integrates with Yammer using OAuth 2.0.

Prerequisites:

Before configuring Yammer as an OAuth Identity Provider in EmpowerID, you need to meet the following conditions:

You must have a Yammer account
Create an application for EmpowerID in Yammer

Once you have completed setting up an SSO connection for Yammer, you can create a link Once the IDP Connection has been set up for Yammer, you can create a link similar to the one below to allow users to login to EmpowerID using Yammer.

https://FQDN_OF_YOUR_EMPOWERID_SERVER/WebIdPForms/Login/Portal/Yammer?returnUrl=%2FWebIdPForms%2F

Be sure to replace FQDN_OF_YOUR_EMPOWERID_SERVER with the FQDN of your EmpowerID server.

Steps

To configure Yammer as an Identity Provider for EmpowerID, you need to do the following:

Create an application for EmpowerID in Yammer
Configure the default Yammer OAuth Provider app
Add a Login button to the Login page for Yammer
Test the OAuth provider app

Registration an application for EmpowerID in Yammer

To allow users to authenticate to EmpowerID using their Yammer credentials, you must register EmpowerID as an OAuth application in the Yammer developer console. See Yammer’s article at https://developer.yammer.com/docs for directions on how to do this. During the app registration process, Yammer will generate a Client ID and Client Secret for the application. You will use these when you create an OAuth Provider App for Yammer in EmpowerID.

When registering an application for EmpowerID in Yammer, set the following:

Setting	Description

Setting	Description
Application Name	Name of the application you are creating. This can be any value.
Organization	The name of your organization
Support e-mail	An email address users of your app can contact for application support
Website	Your organization’s website
Redirect URI	The URL to redirect the user’s browser to after the user has linked the application to their Yammer account. `https://YOUR_EMPOWERID_SERVER/WebIdPForms/oauth/v2`

Configure the default Yammer OAuth Provider app

On the navbar, expand Single Sign-On > SSO Connections and click OAuth / OpenID Connect.
Select the External OAuth Services tab and then search for Yammer.
Click the Provider link for Yammer.
Click the Edit button for the default Yammer OAuth provider app.
Under General Settings, fill in the following information and then click Save.

Field	Description

Field	Description
Consumer Key	Consumer Key generated by Yammer for the app
Consumer Secret	Consumer Secret generated by Yammer for the app
Is Identity Provider	Select this option to flag the OAuth provider as an Identity Provider app.
Select existing Account Directory	Select Yammer to place authenticated users in the selected account store.
Callback Url	This is the URI that Yammer redirects users after they have authenticated with Yammer. The URL should look like the following: `https://YOUR_EMPOWERID_SERVER/WebIdPForms/oauth/v2`, where YOUR_EMPOWERID_SERVER is the FQN of your EmpowerID Web server.

Add a Login Button for Yammer

On the navbar, expand Single Sign-On > SSO Connections and click SSO Connections.
Select the IdP Domains tab and then click the IdP Domains link for the IdP Domain where you want the Login tile to appear.
Select the External OAuth Providers tab and then select the Yammer provider.
Click Save.

To give users the ability to log in using their EmpowerID credentials, be sure to select EmpowerID from the SAML Identity Providers tab of the IdP Domain Details page.

Test the OAuth Provider App

Log out of the EmpowerID Web interface and navigate your browser to the domain name you configured for the Yammer IdP connection.
Click the Login Using Yammer tile.
Log in to Yammer as you normally would.
Click Allow to authorize EmpowerID to retrieve the necessary information to link the Yammer account to your EmpowerID identity (Person object).

You should be authenticated to EmpowerID.

IN THIS ARTICLE