Acumatica和Outlook插件以及Azure单一登录错误 [英] Acumatica and Outlook Plugin and Azure Single Sign on Error

问题描述

与Acumatica的Outlook加载项相关...当我们的用户尝试使用其Azure登录名进行身份验证时，我们看到以下错误。

Related to the outlook add-in for Acumatica... When our users try to authenticate with their azure login, we see the following error.

https://www.dropbox.com /s/le7t3ez5ua69qls/Screenshot%202020-04-23%2019.18.52.png?dl=0

注意：

• 我们通过Office 365为我们的用户启用了2因素身份验证，但我认为这不是问题，因为我已禁用并尝试使用应用可以绕过2个因素的密码

• we have 2 factor authentication on for our users through office 365, but i don't think that is the issue as i disabled and also tried using a app password which would bypass the 2 factor

我们已经自定义了Outlook插件，并且在使用常规登录名时可以正常使用（直接用户名和pwd分别输入acumatica

we have customized the outlook plugin and it works just fine when use a regular login (direct username and pwd into acumatica as opposed to using single sign on)

推荐答案

我们正在运行Acumatica 2020 R1，并有这个工作。我不确定它是否可以在2019R1中使用，但是您可以尝试一下。

We are running Acumatica 2020 R1, and have this working. I am not sure if it will work in 2019R1, but you can give it a try.

我们的环境通过Azure AD Connect与本地AD同步。我们启用了具有传递身份验证的无缝SSO，并且为工作站启用了组策略信任。这允许用户从其域控制的计算机登录Office 365。

Our environment is synced with Local AD through Azure AD Connect. We have seamless SSO enabled with Passthrough Authentication, and the group policy trust enabled for the workstations. This allows the users to sign into office 365 from their domain controlled computers.

https://docs.microsoft.com/zh-CN/azure/active-directory/hybrid/how- to-connect-sso-quick-start

当我们在web.config中启用通过AzureAD的自动登录时，它就像一个超级按钮。我们的ADFS部署在Acumatica的早期版本中存在问题。要在Acumatica中启用自动SSO，您可以修改web.config：

When we enable automatic signon through AzureAD in the web.config, it works like a charm. We had issues in previous versions of Acumatica with our ADFS deployment. To enable automatic SSO in Acumatica you can modify your web.config:

<externalAuth authUrl="Frames/AuthDock.ashx" silentLogin="Federation" externalLogout="True" selfAssociate="True" instanceKey="" claimsAuth="False">

我会在下班时间尝试一下，看看它是否与Outlook兼容，并可能更改您的生产实例以这种方式签名。您始终可以通过访问 https：//acumaticainstance/Frames/Login.aspx来进入登录页面。 SilentLogin = None

I would give this a try on off hours to see if it works with Outlook, and maybe change your production instance to sign in this way. You can always get to the login page by visiting https://acumaticainstance/Frames/Login.aspx?SilentLogin=None

也许设置自动登录将修复前景，并使这些用户更容易使用，并且比非Azure用户更受益？

Maybe setting auto signin will fix outlook and be easier for those users, and be more beneficial than the non-azure users?

这篇关于Acumatica和Outlook插件以及Azure单一登录错误的文章就介绍到这了，希望我们推荐的答案对大家有所帮助，也希望大家多多支持IT屋！