Integrating Trusona and Azure Active Directory B2B

This guide details the steps required to configure Trusona for your AAD (B2E).

By Daniel Fischpan
Updated Sep 4, 2020

• 1. Prerequisites
  • 1.1. Licensing
  • 1.2. Login to Azure
• 2. Trusona Dashboard
  • 2.1. Login or Sign up
  • 2.2. Create an integration
    • 2.2.1. How to find your Directory ID
• 3. Azure configuration
  • 3.1. Create New Custom Control
  • 3.2. Replace JSON Code
  • 3.3. Create a New Policy
• 4. Architecture

1. Prerequisites

1.1. Licensing

Microsoft requires Azure Active Directory E3 or P1 to use the conditional access feature needed to integrate Trusona.

1.2. Login to Azure

Visit the Azure Admin Portal

2. Trusona Dashboard

2.1. Login or Sign up

1. Visit the Trusona Dashboard
2. Login or sign up with the Trusona App

2.2. Create an integration

1. Navigate to the Azure AD Integrations page from the sidebar
2. Click the “Create Azure AD Integration” button
3. Enter a name for this integration
4. Enter your Directory ID
5. Click “Save”

2.2.1. How to find your Directory ID

1. Navigate to the Azure Admin Portal
2. On the left-hand side select Azure Active Directory > Properties

3. Azure configuration

3.1. Create New Custom Control

On the left hand side select Azure Active Directory > Conditional access > Custom controls > New custom control.

3.2. Replace JSON Code

Copy the conditional access custom control policy from the Trusona Dashboard and paste it into the form field displayed after selecting New custom control (from Step 3).

After pasting the JSON into the field, select the Create button.

3.3. Create a New Policy

With this form, you will want to do the following:

1. Name the policy
2. Select the users that will use Trusona
3. Select the apps that will use Trusona
4. Select the Trusona control you created in the previous steps
5. Click the Select button
6. Enable policy by toggling On
7. Select the Create button

Users will be presented with a TruCode to scan the first time they use Trusona as an MFA. This will let the Trusona service know that the device scanning the code is being used by that user. After scanning the code, the user will receive a push notification to confirm your login.

After a user’s device has been bound to their Microsoft account every subsequent MFA request will come in the form of a Push notification.

4. Architecture

Trusona AAD B2B integration architecture diagram

---