Authentication

Overview

Rather than storing User credentials, Vantage doesn't have an application specific password and utilizes industry recognized authentication methods of OAuth and Email OTP.

When visiting the Vantage application a prompt to input your email will appear. Once a user inputs their email address they are then automatically redirected to the appropriate authentication provider, predetermined by their settings. During user creation or updates, there are two types of providers available for user authentication: OAuth and Email OTP.

Providers

OAuth (recommended)

Both Google and Microsoft Azure are supported OAuth providers. When a user logs in with one of these providers they are redirected to the appropriate login page where they can enter their credentials. Once they have successfully logged in they are redirected back to Vantage and are automatically logged in.

Azure

If you are using Azure for SSO you may be required to grant consent to the PPI Vantage application within your Azure tenant. The easiest way to do this is by sending a link to your Azure admin that will allow them to easily grant consent without having to log in to Vantage. Alternatively if the user logging into Vantage has Azure admin access, they are able to approve during the inital log in flow.

Here is the link you can send to your Azure admin. They will need to insert your Azure Tenant ID in place of {tenantId}.

https://login.microsoftonline.com/{tenantId}/adminconsent?client_id=40665c60-6848-4827-9eb7-678d08bf5bde

Note: All OAuth sessions will maintain their login state for 30 days as long as you are logged into your browser with your OAuth provider.

Email OTP

This method allows clients dealing with OAuth complications or restrictions to access the app. When a user attempts to log in with this provider they are sent an email with a one time password. They then enter this password in the 'Enter OTP' field on the login page to sign in.

Note: OTP sessions will maintain their login state for the duration of the browser session with a limit of 30 days.