Skip to main content
Search Again

We think these articles could help you:

    See More
    Nintex Knowledge Base

    Nintex Live Office 365 Action Connection Flow

    Status: Validated

    QUESTION
    How do actions that utilize Nintex Live authenticate against the Live service in Azure?
    ANSWER
    The authentication between Nintex Live and Active Directory works as follows for federated AD accounts: 
    1. Nintex Live attempts to retrieve domain registration information for the user account in the workflow action: "user@yourcompany.com". A request with the login name is sent to Microsoft Online HRD (Home Realm Discovery) service, so it can find out the URL of the federation service (corporate ADFS) responsible for authentication. 
    2. Attempting to authenticate to the security token service at (applicable if user account is federated, otherwise it skips to step 3). 
    3. Send a SAML Request message (contains the logon token from ADFS) to the Microsoft Online Security Token Service (STS), located at the following address: https://login.microsoftonline.com/extSTS.srf 
    4. Receive SAML Response. Parse the Token Response and Get Security Token & Expiry Date.
    5. Send the Security Token to SharePoint Online: https://yourdomain.sharepoint.com/_f...?wa=wsignin1.0
    6. Receive the authentication cookies. After SPO has validated the Security Token, it will return the authentication cookies.
    7. Send requests including authentication cookies (CSOM) a. SharePoint client context - call execute query 
    ADDITIONAL INFORMATION
    RELATED LINKS
    • Was this article helpful?