Skip to main content
This guide walks you through setting up single sign-on (SSO) for your Visualcare VCore environment using Microsoft Azure Active Directory (Azure AD). Once configured, your team can sign in to Visualcare using their existing Microsoft credentials.
SSO is only available in VCore.

​
What you’ll need

  • A Microsoft Azure account with an active subscription
  • Permission to manage applications in Azure AD (Application Administrator, Application Developer, or Cloud Application Administrator role)
  • The Microsoft “Set up a tenant” quickstart completed

​
Instructions

1

Register Visualcare in Azure

  1. Sign in to the Azure portal
  2. If you have access to multiple tenants, use the Directories + subscriptions filter in the top menu to switch to the correct tenant
  3. Search for and select Azure Active Directory
  4. Under Manage, select App registrations, then select New registration
  5. Enter a display name for your application (your users may see this name when signing in)
  6. Set the sign-in audience - usually “Accounts in this organisational directory only”
  7. Leave Redirect URI blank for now
  8. Click Register
The Azure portal displays the app registration’s Overview pane. Note the Application (client) ID - you’ll need this later.
New app registrations are hidden to users by default. When you’re ready for users to see the app on their My Apps page, go to Azure Active Directory → Enterprise applications, select the app, then on the Properties page toggle “Visible to users?” to Yes.
2

Add the redirect URI

Use the following URL as the redirect URI:
3

Configure platform settings

  1. In the Azure portal, in App registrations, select your application
  2. Under Manage, select Authentication
  3. Under Platform configurations, select Add a platform
  4. Select Web
  5. In the Redirect URIs text box, enter: https://app.visualcare.com.au/inc/export/microsoft/index.php
  6. Click Configure
4

Create a client secret

  1. In App registrations, select your application
  2. Select Certificates & secrets, then Client secrets, then New client secret
  3. Add a description for the secret
  4. Select an expiration (maximum two years)
  5. Click Add
  6. Copy the secret value immediately
The secret value is only displayed once. If you navigate away from this page, you won’t be able to view the secret again and will need to create a new one.
5

Send credentials to Visualcare

Provide the following three values to your Visualcare contact:
  1. Application (client) ID - found on the Overview tab
  2. Directory (tenant) ID - found on the Overview tab
  3. Secret Value - copied in the previous step
Do not share these credentials with anyone other than Visualcare.
6

Enable SSO for users

Once Visualcare has configured SSO on your environment:
  1. Each user needs to log in at least once using their normal Visualcare credentials before SSO is enabled for their account
  2. In VCore, go to the Users page
  3. Select a user from the list
  4. Tick the Enable SSO box
  5. Click Save
  6. Repeat for each user who should use SSO

​
Signing in with SSO

Once SSO is enabled for a user, the standard login page no longer works for that user. Instead, use the SSO login page:
Bookmark the SSO login URL for easy access. Users with SSO enabled are prompted to sign in with their Microsoft credentials.

​
Running into issues?

See Login troubleshooting for common errors and fixes.

Creating users

Set up user accounts in Visualcare

User access control

Configure permissions and access levels