Table of Contents

Microsoft Entra External ID

Create a tenant

To create a tenant, follow this guide : https://learn.microsoft.com/en-us/entra/external-id/customers/quickstart-tenant-setup

Register an application

To register an application, follow this guide : https://learn.microsoft.com/en-us/entra/identity-platform/quickstart-register-app

Add a redirect URI

  1. In the Microsoft Entra admin center, in App registrations, select your application.
  2. Under Manage, select Authentication.
  3. Select Add Redirect URI.
  4. Select Web.
  5. Type https://localhost/neos/[CLUSTER_NAME]/signin-oidc for your development environment. Replace [CLUSTER_NAME] with your cluster name.
  6. Select Configure.

Add a client secret

  1. In the Microsoft Entra admin center, in App registrations, select your application.
  2. Under Manage, select Certificates & secrets.
  3. Under Client secrets, select New client secret.
  4. Type a description and set the expiration date.
  5. Select Add.
  6. Copy the client secret value.

Configure the authentication in the cluster configuration

Authentication:
  Preset: MicrosoftEntraExternalID
  Authority: https://[TENANT_DOMAIN_NAME].ciamlogin.com/[TENANT_ID]/v2.0
  ClientId: [CLIENT_ID]
  ClientSecret: [CLIENT_SECRET]

Replace :

  • [TENANT_DOMAIN_NAME] with the Tenant domain name.
  • [TENANT_ID] with the Directory (tenant) ID.
  • [CLIENT_ID] with the Application (client) ID.
  • [CLIENT_SECRET] with the Client secret.