Epicor HCM Authentication - Azure AD SSO

Hi,
We are using the Epicor SAAS solution, and we use an authentication process which authenticates with our Active Directory on premises. Can we integrate this with Azure AD?

HCM can be utilized with SSO, but it’s kind of a goofy set up. You need a separate app (extra instance/installation of HCM pointed at the same database) and you tweak some settings in that instance to allow for AD/SSO. Should be covered in the Comprehensive Installation guide and a document for HCM Authentication Methods and Registration.

There also is a document for “Deferred Authentication” and there is a special service that runs called EHDAService.

Check the EpicCare/Epicweb sites for the docs.

Thanks Mike. Yes, we are using “Deferred Authentication” at the moment. All of our services are SSO with Azure AD, and we’re trying to move our users to password less authentication. However, EHCM authentication is the last hurdle towards this objective. Do you know of any other workarounds/ recommendations? Is there any move towards this expected from Epicor? Cloud authentication is more secure than on-premises so it would be great if there was an easier integration with Azure AD.

At the moment, I do not of any improvements in this as of the current release, although I’ve heard that they are considering it because of the new Epicor Identity process.