Modern Authentication in Aquaforest Products

You need to follow the following 4 main steps in order to use Modern Authentication in Searchlight:

1. Create a self-signed certificate and a private key file.
2. Register an Azure AD application in the Azure Active Directory tenant that is linked to your Office 365 tenant (the one containing the sites/libraries you want to process).
3. “Connect” the certificate created in step 1 to the application created in step 2.
4. Provide the values generated from the above steps in the Aquaforest application.

This guide is based on this blog.

1. Create a self-signed certificate and a private key file

1. Copy the PowerShell script from the blog and save it in a file named “Create-SelfSignedCertificate.ps1“
   
2. Open PowerShell in administrator mode
3. While in PowerShell, change the directory to the location containing the “Create-SelfSignedCertificate.ps1” script file.
4. Run the script by using the following command

   ..\Create-SelfSignedCertificate.ps1 -CommonName "MyCompanyName" -StartDate 2021-07-01 -EndDate 2022-07-01

   Note:

   • Change “MyCompanyName” to your company name
   • Change the StartDate to the current date
   • Change the EndDate to a date in the future
5. You will be asked to give a password to encrypt your private key. Make a note of this as you will need to provide it in the Aquaforest application.
6. After this a .PFX file and a .CER file will be exported to the current folder.

2. Register an Azure AD application

Follow the steps in the blog starting from “Next step is registering an Azure AD application in the Azure Active Directory […]”:

3. Connect the certificate created in step 1 to the Azure AD application

Follow the steps in the blog starting from “Final step is “connecting” the certificate we created earlier to the application.”

4. Provide the values generated from the above steps in the Aquaforest application (e.g. Searchlight)

In order to use Modern Authentication in Searchlight, you need to provide 4 values for the fields highlighted in image below.

These 4 values will be available if you correctly followed the previous steps.

• Azure Application ID
  
  1. In Azure, go to the Azure AD application you created.
  2. Click on Overview on the left pane.
  3. Copy the “Application (client) ID” and paste in the “Azure
     Application ID” textbox in Searchlight
     
• Azure AD Tenant
  
  1. In Azure, click on the Manifest tab on the left pane
  2. Copy the value for publisherDomain and paste in the “Azure AD
     Tenant” textbox in Searchlight (“Tenant URL” in Searchlight 1.3 and “Directory (Tenant) ID” in Autobahn DX 5.5)
     
• Certificate Path (.pfx)
  Provide the full path of the .PFX file generated in step 1 (f)
• Certificate Password
  Provide the password you supplied in step 1 (e)