Yammer
The EmpowerID SSO framework allows you to configure Yammer as an identity provider (IdP) for EmpowerID. EmpowerID integrates with Yammer using OAuth 2.0.
Prerequisites:
Before configuring Yammer as an OAuth Identity Provider in EmpowerID, you need to meet the following conditions:
You must have a Yammer account
Create an application for EmpowerID in Yammer
Once you have completed setting up an SSO connection for Yammer, you can create a link Once the IDP Connection has been set up for Yammer, you can create a link similar to the one below to allow users to login to EmpowerID using Yammer.
https://FQDN_OF_YOUR_EMPOWERID_SERVER/WebIdPForms/Login/Portal/Yammer?returnUrl=%2FWebIdPForms%2F
Be sure to replace FQDN_OF_YOUR_EMPOWERID_SERVER with the FQDN of your EmpowerID server.
Steps
To configure Yammer as an Identity Provider for EmpowerID, you need to do the following:
Create an application for EmpowerID in Yammer
Configure the default Yammer OAuth Provider app
Add a Login button to the Login page for Yammer
Test the OAuth provider app
Registration an application for EmpowerID in Yammer
To allow users to authenticate to EmpowerID using their Yammer credentials, you must register EmpowerID as an OAuth application in the Yammer developer console. See Yammer’s article at https://developer.yammer.com/docs for directions on how to do this. During the app registration process, Yammer will generate a Client ID and Client Secret for the application. You will use these when you create an OAuth Provider App for Yammer in EmpowerID.
When registering an application for EmpowerID in Yammer, set the following:
Setting | Description |
|---|---|
Application Name | Name of the application you are creating. This can be any value. |
Organization | The name of your organization |
Support e-mail | An email address users of your app can contact for application support |
Website | Your organization’s website |
Redirect URI | The URL to redirect the user’s browser to after the user has linked the application to their Yammer account.
|
Configure the default Yammer OAuth Provider app
On the navbar, expand Single Sign-On > SSO Connections and click OAuth / OpenID Connect.
Select the External OAuth Services tab and then search for Yammer.
Click the Provider link for Yammer.
Click the Edit button for the default Yammer OAuth provider app.
Under General Settings, fill in the following information and then click Save.
Field | Description |
|---|---|
Consumer Key | Consumer Key generated by Yammer for the app |
Consumer Secret | Consumer Secret generated by Yammer for the app |
Is Identity Provider | Select this option to flag the OAuth provider as an Identity Provider app. |
Select existing Account Directory | Select Yammer to place authenticated users in the selected account store. |
Callback Url | This is the URI that Yammer redirects users after they have authenticated with Yammer. The URL should look like the following: |
Add a Login Button for Yammer
On the navbar, expand Single Sign-On > SSO Connections and click SSO Connections.
Select the IdP Domains tab and then click the IdP Domains link for the IdP Domain where you want the Login tile to appear.
Select the External OAuth Providers tab and then select the Yammer provider.
Click Save.
To give users the ability to log in using their EmpowerID credentials, be sure to select EmpowerID from the SAML Identity Providers tab of the IdP Domain Details page.
Test the OAuth Provider App
Log out of the EmpowerID Web interface and navigate your browser to the domain name you configured for the Yammer IdP connection.
Click the Login Using Yammer tile.
Log in to Yammer as you normally would.
Click Allow to authorize EmpowerID to retrieve the necessary information to link the Yammer account to your EmpowerID identity (Person object).
You should be authenticated to EmpowerID.
IN THIS ARTICLE