Collect Azure AD Configuration Information

To use Azure AD as an authentication provider, you need to collect the following information:

• Client ID

• Endpoint

• Client Secret

1. Sign into the Azure AD home page: https://portal.azure.com.

2. Select App registrations from the Resource Menu. A list of the apps that belong to you or your organization is shown.

3. To begin collecting information, select the app.

4. Application (client) ID is displayed under Essentials information. Copy and save the ID. You will need this to configure the System Management Server.

   

5. Select Endpoints from the Command bar, then select the OpenID Connect metadata document.

   

   The portion of the OpenID Connect information after "v2.0" is not used when configuring AVEVA Identity Manager.

   Thus, the endpoint used to configure AIM is https://login.microsoftonline.com/*******************/v2.0

   The trailing slash is not needed.

6. Select Certificates & Secrets from the Command bar, then select New Client Secret.

7. Add a Description for the new client. Then, Add the secret.

   

8. Once you add the secret, copy and save the secret value. You will need the value to configure the System Management Server (the secret ID is not needed for configuration).

   Note: Be sure to save the value now. You will not be able to retrieve it later.