Overview

8x8 applications support Single Sign-On integration with on-premise installations of Microsoft Active Directory (AD) and use Active Directory Federation Services (ADFS) as an intermediary.

ADFS is an optional component of AD which enables controlled access to AD’s authentication capability from external applications such as 8x8.

The integration uses the Security Assertion Markup Language (SAML) 2.0 which is a widely adopted open standard for claims-based authentication between applications.

Audience

This document is designed for IT administrators who need to configure Single Sign-On between 8x8 applications and Microsoft Active Directory.

Plan SSO setup with ADFS for 8x8 applications

Setting up Single Sign-On with ADFS for 8x8 applications has a number of stages which are outlined in this table. Read prerequisites carefully to ensure a smooth installation.

Stage Prerequisites
Install ADFS

Domain administrator rights to a supported version of Windows Server:

  • Windows Server 2012
  • Windows Server 2012 R2
  • Windows Server 2016
  • Windows Server 2019
Configure ADFS
  • A DNS name for your ADFS server. For example: fs.mycompanydomain.com
  • An SSL certificate, for the chosen DNS name, that installed on the server running ADFS
  • A public IP address for your ADFS server with inbound access for https (tcp 443) traffic
  • A DNS A record is added for your chosen DNS name
Configure SSO in 8x8 Configuration Manager An 8x8 login with administrator privileges
Test login A user that is configured in 8x8 Configuration Manager with their Federation ID set to their AD login name