Single Sign-On with Azure AD

RemotePC Team and Enterprise plan users can use Single Sign-On (SSO) for accessing their account. Admin of the accounts can choose a SAML 2.0 identity provider (IdP) to login to your RemotePC account without having to remember another password.

To setup Single Sign-On (SSO) with Azure AD, the admin needs to:

• Create an app on Azure AD console
• Assign users to the app
• Configure RemotePC account for Single Sign-On (SSO)

To use Azure AD as an identity provider for SSO, you need to create an app on Azure AD console.

To create the app,

1. Login to the Azure AD console using your Azure AD account credentials and click on 'Enterprise applications'.
   
   
   
2. Select the ‘All Applications’ tab from the LHS menu, and click ‘New application’.
   
   
   
3. From the app gallery that appears, search for the RemotePC application.
   
   
   
4. Click ‘Create’ to add the RemotePC application to your account.
   
   
   
5. Select 'Set up single sign on' and choose 'SAML' as the preferred single sign-on method.
   
   
   
   
6. Under the 'Setup Single Sign-On with SAML' screen that appears,
   
   
   
   1. Click 'Edit' corresponding to the 'Basic SAML Configuration' and enter the URLs as given below:
      • Identifier (Entity ID) https://sso.remotepc.com/rpcnew/sso/metadata
      • Reply URL (Assertion Consumer Service URL): https://sso.remotepc.com/rpcnew/sso/process
      • Sign on URL https://sso.remotepc.com/rpcnew/sso/process
      • Logout URL https://sso.remotepc.com/rpcnew/sso/process
      
      
      
   2. From the 'SAML Signing Certificate' section, click 'Download' and save the x509 certificate (Base64).
      
      
      
   3. Copy the 'Login URL' and 'Azure AD Identifier', and configure it with your RemotePC account.
      
      
      
   Assign users to the app

   To enable SSO for user accounts, admin needs to assign users to the app created on Azure AD console.

   To assign users to the Azure AD app,

   1. From the new app created on Azure AD admin console, navigate to the 'Users and groups' tab and click 'Add user'.
      
      
      
   2. Select the users you would like to add to the app and click 'Assign'.
      
      
      
   
   
   Configure RemotePC account for Single Sign-On (SSO)

   Admin needs to provide the received SAML 2.0 URLs and Certificate in the Single Sign-On application from the RemotePC web interface.

   To configure SSO,

   1. Login to RemotePC via web browser.
   2. Click the username displayed on the top-right corner and click 'My Account'.
   3. Click 'Single Sign-On'.
   4. Enter a name for your SSO profile.
   5. Enter the 'IDP Issuer URL', 'Single Sign-On Login URL' and add the 'X.509 Certificate (Base64)' received from your newly created app on Azure AD console.
      
      
      
      
   6. Click 'Configure Single Sign-On'.
      

   You will receive an email when SSO is enabled for your account.