After logging-in into Microsoft Entra Admin Center in left navigation open Applications and then visit the App registrations page.
On the App registrations page click + New registration
Here we need to give the application a name.
Dependent if we use a Single tenant or a Multitenant application, the Tenant ID of our application will be relevant later.
After everything is setup, click Register.
Now we are in the application Overview page of our application (New App)
The Application (client) ID is the client id of our application and is required for configuration the invitario Microsoft Entra integration.
The Directory (tenant) ID is only relevant if we selected the single tanent option in the App registration screen. This need then be also filled out in the invitario Microsoft Entra integration.
In the Application navigation select the Authentication menu item.
There click the + Add a platform button
We select Web
Based on the instance we are setting the application for we need one of the following Redirect URL:
Stage | Redirect URI |
|---|---|
Local | |
<instance> | https://<instance>.invitario.com/admin/oauth/entra |
Next, we set up the API permissions which are in our App navigation.
By default is should be already set, but make sure User.Read is added. This is needed to query the user's email address.
Now we need a Client Secret to access the app. Visit the Certificates & secrets menu and click on + New client secret.
Give the secret a Description and specify an expiration time and then Save.
After you have saved the client secret you can copy the client secret to somewhere save ( e.g.: password manager).
As an Account Admin visit the Administration > Integrations page
Application (client) ID, the Client Secret and the Directory (tenant) ID.
If you are in a Multitenant application, set Tenant to common
Then Save.
Make sure what Account ID your account has.
Then visit https://<instance>.invitario.com/de/admin/login/<account id>
After clicking Login with Microsoft Entra you will be redirected to the Microsoft Login Page. If the user exists in your account, he will be able to login to Invitario.