SchoolFront can authenticate your Azure Active Directory users with Single Sign-On (SSO) capabilities. In order to make this work properly, please follow these steps.
Register the Application
Login to https://portal.azure.com
Select App Registrations from the Menu
(If not on your menu go to Azure Active Directory and then select from the left)
Click New Registration
Enter SchoolFront in the Name of the application
Leave the Support Account Types as is.
Enter https://azure.schoolFront.com/MSSignInProcessRedirect.aspx in the redirect URL
Then Click Register
In App Registrations, select the SchoolFront application you just created.
Under Authentication check ID Tokens and click Save.
Under Token Configuration click Add Optional Claim
Select the default token type of ID and click the checkbox for the email claim. Click Add.
A pop-up should appear. Check the box for Turn on the Microsoft Graph email permission and click Add
Lastly, please email email@example.com the values listed under the Application (client) ID and Directory (tenant) ID fields for the SchoolFront application registration.