Vuelio supports OAuth 2.0 with Microsoft Azure Active Directory (Azure AD).
Here are the details we require to integrate your SSO with Vuelio.
Application ID:
Secret Expiry:
Secret Value:
PrimaryDomain:
Test user email address: (preferably the IT/network admin performing this setup)
Please also find our video & text guides below that will direct you through Azure AD to configure and obtain these details. If you have any questions or issues along the way please let us know.
Video Tutorial (Vuelio only)
Text Walkthrough
The below is a general guide to enabling auth with Azure tenant etc.
Authentication systems and types will differ per client, so some additional steps may be required following the below.
Standard Setup
1. Log onto the Azure Portal with an MA account.
2. Open App Registrations.
3. Create new app registration.
4. Enter the name Vuelio SSO App.
5. From the dropdown select "web" and enter
6. Click next to create.
7. Once created, note Application ID.
8. Click "Certificates and secrets", create new client secret called "Vuelio SSO Secret".
9. Set expiry date to 24 months.
10. Note the specific expiry date and value.
11. Open API permissions
12. Select Microsoft Graph
13. Grant delegated permissions of openID and profile
14. Grant admin consent to the permissions
15. Go out of the App registration and then click on custom domains in the left navigation from AAD, note the Primary domain
16. Open a browser and navigate to the following URL, replacing <Primary domain> with the domain you noted in step 15 https://login.microsoftonline.com/<Primary domain>/v2.0/.well-known/openid-configuration
A response similar to the image below will appear:
17. Check for the following values
response_types_supported has id_token
Please ensure you have the following claims setup in the claims_supported field: preferred_username and upn.
We will use these claims to match correct users.
If either of these are missing you will need to do the following extra setup...
Extra Setup
Extra 1. Click on App Registrations in the left navigation from AAD, then click on the App Registration called Vuelio SSO App that you created in step 6.
response_types_supported is Missing id_token
Extra 2. Click on Authentication in the left navigation
Extra 3. Under the ‘Implicit grant and hybrid flows’ heading tick the ‘ID tokens' (used for implicit and hybrid flows) checkbox
Extra 4. Click the Save button
claims_supported are Missing
Extra 5. Add Claim
Extra 6. Select token type: ID
Extra 7. Select: preferred_username or upn as your primary email source
Extra 8. Add
Extra 9. Repeat steps 5 - 8 for your secondary email claim selection from, preferred_username, or upn.
Complete Extra Setup
Repeat steps 16 & 17 to validate extra setup is successful.
After we receive your SOO setup information we will configure our system. Once configured, a 3 hour delay is required, after which time we will contact you to perform the first user test.
Please provide the email address of the test user - this cannot be an email address already registered to use the Vuelio application. Preferably your IT or network admin performing this setup.
Australian-based clients using Vuelio
N.B Australian-based clients using Vuelio should replace URL in step #5 with: