Yammer Identity Provider Connection

Owned by Phillip Hanegan
Feb 29, 2024
3 min read

The EmpowerID SSO framework allows you to configure Yammer as an identity provider (IdP) for EmpowerID. EmpowerID integrates with Yammer using OAuth 2.0.

Prerequisites:

Before configuring Yammer as an OAuth Identity Provider in EmpowerID, you need to meet the following conditions:

  • You must have a Yammer account

  • Create an application for EmpowerID in Yammer

Once you have completed setting up an SSO connection for Yammer, you can create a link Once the IDP Connection has been set up for Yammer, you can create a link similar to the one below to allow users to login to EmpowerID using Yammer.

https://FQDN_OF_YOUR_EMPOWERID_SERVER/WebIdPForms/Login/Portal/Yammer?returnUrl=%2FWebIdPForms%2F

Be sure to replace FQDN_OF_YOUR_EMPOWERID_SERVER with the FQDN of your EmpowerID server.

Steps

To configure Yammer as an Identity Provider for EmpowerID, you need to do the following:

  1. Create an application for EmpowerID in Yammer

  2. Configure the default Yammer OAuth Provider app

  3. Add a Login button to the Login page for Yammer

  4. Test the OAuth provider app

Registration an application for EmpowerID in Yammer

To allow users to authenticate to EmpowerID using their Yammer credentials, you must register EmpowerID as an OAuth application in the Yammer developer console. See Yammer’s article at https://developer.yammer.com/docs for directions on how to do this. During the app registration process, Yammer will generate a Client ID and Client Secret for the application. You will use these when you create an OAuth Provider App for Yammer in EmpowerID.

When registering an application for EmpowerID in Yammer, set the following:

Setting

Description

Setting

Description

Application Name

Name of the application you are creating. This can be any value.

Organization

The name of your organization

Support e-mail

An email address users of your app can contact for application support

Website

Your organization’s website

Redirect URI

The URL to redirect the user’s browser to after the user has linked the application to their Yammer account.

https://YOUR_EMPOWERID_SERVER/WebIdPForms/oauth/v2

 

Configure the default Yammer OAuth Provider app

  1. On the navbar, expand Single Sign-On > SSO Connections and click OAuth / OpenID Connect.

  2. Select the External OAuth Services tab and then search for Yammer.

  3. Click the Provider link for Yammer.

     

  4. Click the Edit button for the default Yammer OAuth provider app.

     

  5. Under General Settings, fill in the following information and then click Save.

Field

Description

Field

Description

Consumer Key

Consumer Key generated by Yammer for the app

Consumer Secret

Consumer Secret generated by Yammer for the app

Is Identity Provider

Select this option to flag the OAuth provider as an Identity Provider app.

Select existing Account Directory

Select Yammer to place authenticated users in the selected account store.

Callback Url

This is the URI that Yammer redirects users after they have authenticated with Yammer. The URL should look like the following: https://YOUR_EMPOWERID_SERVER/WebIdPForms/oauth/v2, where YOUR_EMPOWERID_SERVER is the FQN of your EmpowerID Web server.

 

Add a Login Button for Yammer

  1. On the navbar, expand Single Sign-On > SSO Connections and click SSO Connections.

  2. Select the IdP Domains tab and then click the IdP Domains link for the IdP Domain where you want the Login tile to appear.

     

  3. Select the External OAuth Providers tab and then select the Yammer provider.

     

  4. Click Save.

To give users the ability to log in using their EmpowerID credentials, be sure to select EmpowerID from the SAML Identity Providers tab of the IdP Domain Details page.

Test the OAuth Provider App

  1. Log out of the EmpowerID Web interface and navigate your browser to the domain name you configured for the Yammer IdP connection.

  2. Click the Login Using Yammer tile.

  3. Log in to Yammer as you normally would.

  4. Click Allow to authorize EmpowerID to retrieve the necessary information to link the Yammer account to your EmpowerID identity (Person object).


    You should be authenticated to EmpowerID.

IN THIS ARTICLE