SSO For Blackbaud CRM

Where can I find documentation on how to configure and create the needed customization(s) to Authenticate Blackbaud CRM via SSO to AzureAD using SAML? This information should be available to us, especially for those of us unable to host with Blackbaud and use BBID. Thank you in advance!

Comments

  • @Allen Roth Hello! Thanks for posting. I'm reaching out to the team to see what documentation exists. Thanks!

  • @Allen Roth:

    Where can I find documentation on how to configure and create the needed customization(s) to Authenticate Blackbaud CRM via SSO to AzureAD using SAML? This information should be available to us, especially for those of us unable to host with Blackbaud and use BBID. Thank you in advance!

    Thanks for your patience! From our team “It is in the Infinity Install Guide in the ADAuthenticator section on page 112.”

  • @Crystal Bruce Thank you very much for this reference. It is a good place to start.

  • @Crystal Bruce
    Hi Crystal,

    I've been diving into this in more depth. In the referenced Infinity Installation and Reference Guide, on page 115 it says:

    Deploy the Remote Endpoint at the Site That Handles Credential Authentication Blackbaud provides two files that implement a turnkey implementation of a remote endpoint that can perform authentication. These files are ASP.Net files that must be deployed onto a Windows Server running IIS with the ASP.Net, Application Server, and .Net Framework features enabled.

    The files are:

    • BBADAuth.ashx — An ASP.Net HTTP handler that will be invoked when the Blackbaud CRM system requests authentication.
    • web.config — A standard ASP.Net web.config file with the settings to enable Basic Authentication specified.

    Please reach back out to the team. Where can I find these files? I've searched through my CRM server and my development machine where the SDK is installed, and I cannot find the “BBADAuth.ashx” file anywhere.

    Thank you!

  • @Allen Roth thanks! I've reached out. :-)

  • @Allen Roth:

    @Crystal Bruce
    Hi Crystal,

    I've been diving into this in more depth. In the referenced Infinity Installation and Reference Guide, on page 115 it says:

    Deploy the Remote Endpoint at the Site That Handles Credential Authentication Blackbaud provides two files that implement a turnkey implementation of a remote endpoint that can perform authentication. These files are ASP.Net files that must be deployed onto a Windows Server running IIS with the ASP.Net, Application Server, and .Net Framework features enabled.

    The files are:

    • BBADAuth.ashx — An ASP.Net HTTP handler that will be invoked when the Blackbaud CRM system requests authentication.
    • web.config — A standard ASP.Net web.config file with the settings to enable Basic Authentication specified.

    Please reach back out to the team. Where can I find these files? I've searched through my CRM server and my development machine where the SDK is installed, and I cannot find the “BBADAuth.ashx” file anywhere.

    Thank you!

    Hi Allen, the team has requested you contact support to expedite and track this issue. Are you able to open a support case? Thanks!

    Crystal

  • @Allen Roth

    • BBADAuth.ashx — An ASP.Net HTTP handler that will be invoked when the Blackbaud CRM system requests authentication.
    • web.config — A standard ASP.Net web.config file with the settings to enable Basic Authentication specified.

    Did you get what you needed? We used this Active Directory Authenticator before switching to Shibboleth - can provide background if you are still looking. Feel free to reach out: rmdowns@vcu.edu.

  • @Allen Roth - wondering if you had any success with your SSO implementation? Would you be willing to share more details if so? I think your goal might be slightly different to ours but keen to hear of any breakthroughs you have had if any.