Microsoft Entra ID

Microsoft Entra ID

Microsoft Entra-ID


Prepare Microsoft Entra-ID

Register an application

After logging-in into Microsoft Entra Admin Center in left navigation open Applications and then visit the App registrations page.

On the App registrations page click + New registration

Here we need to give the application a name.
Dependent if we use a Single tenant or a Multitenant application, the Tenant ID of our application will be relevant later.

After everything is setup, click Register.

Configurate application

Now we are in the application Overview page of our application (New App)

The Application (client) ID is the client id of our application and is required for configuration the invitario Microsoft Entra integration.

The Directory (tenant) ID is only relevant if we selected the single tanent option in the App registration screen. This need then be also filled out in the invitario Microsoft Entra integration.

Setup Redirect URL

In the Application navigation select the Authentication menu item.

There click the + Add a platform button

We select Web

Based on the instance we are setting the application for we need one of the following Redirect URL:

Stage

Redirect URI

Local

http://localhost:8080/admin/oauth/entra

<instance>

https://<instance>.invitario.com/admin/oauth/entra

API Permissions

Next, we set up the API permissions which are in our App navigation.

By default is should be already set, but make sure User.Read is added. This is needed to query the user's email address.

Certificates & secrets

Now we need a Client Secret to access the app. Visit the Certificates & secrets menu and click on + New client secret.

Give the secret a Description and specify an expiration time and then Save.

After you have saved the client secret you can copy the client secret to somewhere save ( e.g.: password manager).

Setup Invitario

As an Account Admin visit the Administration > Integrations page

Application (client) ID, the Client Secret and the Directory (tenant) ID.

If you are in a Multitenant application, set Tenant to common

Then Save.

Login via Microsoft Entra

Make sure what Account ID your account has.

Then visit https://<instance>.invitario.com/de/admin/login/<account id>

image-20240606-125325.png

After clicking Login with Microsoft Entra you will be redirected to the Microsoft Login Page. If the user exists in your account, he will be able to login to Invitario.