The EmpowerID SSO framework allows you to configure Yammer as an identity provider for the EmpowerID Web application. EmpowerID integrates with Yammer using the OAuth protocol to allow your users to log in to EmpowerID using their Yammer account.
This topic describes how to configure an IDP connection for Yammer and is divided into the following activities:
- Adding the Consumer Key, Consumer Secret and Redirect URI to the Yammer OAuth Connection
- Adding MFA Points to the Yammer OAuth Connection
- Adding a Login Tile for Yammer
- Testing the Yammer connection
To add the Client ID and Client Secret to the Yammer OAuth Connection
- From the navigation sidebar, expand Admin > SSO Connections and click OAuth.
- From the OAuth Applications management page, click the OAuth Service Provider tab and then search for Yammer.
- From the OAuth Service Provider grid, click the Yammer link.
- From the External OAuth Provider Details page that appears, click the Edit button for the specific Yammer connection you want to edit. By default, EmpowerID includes one connection. However, you can add as many connections for Yammer as your organization needs.
- In the OAuth Connection pane that appears, type the Client ID Yammer generated for your application in the Consumer Key field and the Client Secret in the Consumer Secret field.
- Click Save to close the OAuth Connection pane.
- Prepend the value of the Callback Url with the FQDN of your EmpowerID Web server, using the https scheme. For example, the FQDN of the EmpowerID Web server in our environment is "sso.empowersso.com" so the full Callback Url for our site is "https://sso.empowersso.com/empoweridwebidpforms/oauth/v2".
- Click Save to close the OAuth Connection pane.
- Optionally, add any desired MFA points to the Yammer application by following the below steps.
To add MFA points to the Yammer application
- From the External OAuth Providers page for Yammer, click the Provider Edit link at the top of the page.
- In the MFA Point Value field, type the number of MFA points you want to give to users logging in with Yammer.
- Click Save.
Next, add a login tile for Yammer to the desired IdP Domains. This allows your users to authenticate to EmpowerID with their Yammer credentials. If you have not set up an IdP Domain for your environment, you can do so by following the directions in the below drop-down.
To add a Login Tile for Yammer
- From the Navigation Sidebar, expand Admin > Applications and Directories > SSO Connections and click SSO Components.
- Select the IdP Domains tab and then click the link for the IdP domain for which you want to add a login tile.
- In the IdP Domain Details page that appears, click the External OAuth Providers tab and check the box beside Yammer.
Click Save.
To test the Yammer IdP connection
- From the Navigation Sidebar, expand IT Shop and click Workflows.
- From the Workflows page, recycle the EmpowerID App Pools by clicking Recycle EmpowerID App Pools.
- Log out of the EmpowerID Web interface and navigate your browser to the domain name you configured for the Yammer IdP connection.
- Click the Login using Yammer button.
- This redirects your browser to the Yammer Login for the EmpowerID web application you created in Yammer. Enter your Yammer credentials and click Log In.
Yammer directs you to the Access Request page for the EmpowerID application you created in Yammer. Click Allow to allow EmpowerID to retrieve the information in needs to link the Yammer account to your EmpowerID Person.
Back in the EmpowerID Web application, click Yes to indicate that you have an EmpowerID login.
- Type your EmpowerID Login or Email in the form and click Submit. The EmpowerID Person must have a valid email address as EmpowerID sends a one-time password to that address.
- Check your email for the one-time password.
- Back in the EmpowerID Web interface, type the one-time password into the Password field of the One-Time Password Validation form and click Submit.
