Microsoft Entra (formerly Azure AD) settings

Microsoft Entra ID can be used as a user provider for creating a repository in AVEVA Work Tasks and can also be used to access AVEVA Work Tasks Pro app through Microsoft Entra ID.

Before configuring the Microsoft Entra settings in AVEVA Work Tasks, register the app in Microsoft Entra ID.

App registration

You need to register the app in Microsoft Azure to generate the Client Id, Tenant Id, and Object Id.

To register the App:

1. Access the Microsoft Azure portal.

2. Select View under Manage Microsoft Entra ID on the Microsoft Azure Home page.

3. Select App registrations in the left navigation pane.

4. Select New registration tab.

   1. In the Name box, enter the display name for this application.

   2. For Supported account types, select Accounts in this organizational directory only (AVEVA Solutions Limited only - single tenant).

   3. For Redirect URI, specify the URI where the authentication response should be sent. Note that redirect URIs are case-sensitive.

5. Select Register.

   The app is registered in Microsoft Entra ID.

Microsoft Entra settings

In AVEVA Work Tasks, you can configure Microsoft Entra ID using the Farm Configuration Wizard. With this setting, the user is authenticated against Microsoft Entra provider and can access the AVEVA Work Tasks features.

Configure Microsoft Entra settings

6. On the Windows Start menu, point to Programs > AVEVA > Work Tasks, and then select Farm Configuration Wizard.

   The AVEVA Work Tasks Farm Configuration Wizard appears.

7. Select Next.

   The Edit AVEVA Work Tasks Farm Settings window appears.

8. Select Service settings.

   The Enterprise Server settings can be selected if the Farm Server Installation is using Enterprise Server Installation.

9. Select Next.

   The Services/Global Settings window appears.

10. Select against Global Settings.

11. In the Global Settings window, select the OpenID Settings tab.

12. In the Tenant ID box, enter the tenant ID of the Microsoft Entra instance.

13. In the Client ID box, enter the client ID of the Microsoft Entra instance.

14. In the Client Secret box, enter the client secret key of the Microsoft Entra instance.

15. Select Save and then select OK.

Note:
- If you log out from the Central Configuration (CC) site, you are also logged out from the Enterprise Console (EC) site. To access the EC site again, you need to access the EC URL, provide the access credentials, and then continue to use the EC site.

- The Microsoft Entra provider is listed in the Resource Provider drop-down list. But if you create the repository with this Microsoft Entra provider, it will work only when you configure Microsoft Entra ID through the Farm Configuration Wizard.

- Once you configure Microsoft Entra ID from Farm Configuration Wizard,
-- the Application Pool of Central Configuration changes to AVEVA Work Tasks Integrated Mode.
-- while accessing the Enterprise Console and Central Configuration, you are redirected to the Microsoft Online Page for authentication.

- When the environment is configured to Microsoft Entra ID, the following are not supported:
-- Synchronize Users
-- Electronic Signature
-- Disable Users from Microsoft Entra ID
-- Security Workflow
-- Wizard for Human Activities (In Assign Actors property of Human Activities while building the filter condition, the ‘IN’ and ‘Not In’ operators are not supported.)
-- Role Condition Set through Filter Condition of To Property in the Human Activity
-- The user’s display name with characters like # and ^
-- System Platform IDE

- The user or role search uses the starting character that you enter and does not have any search.

- You cannot have both the AVEVA Identity Manager (AIM) and Microsoft Entra user providers together.

- Scheduler Event Association installed through package does not work in Microsoft Entra ID when logged-in user's display name has special characters.

- To access Microsoft Entra repository, the user must use HTTPS sites. The application does not support HTTP sites.