Microsoft Entra Settings

Microsoft Entra ID can be used as a user provider for creating a repository in AVEVA Work Tasks and can also be used to access AVEVA Work Tasks Pro app through Microsoft Entra ID.

Before configuring the Microsoft Entra ID settings in AVEVA Work Tasks, register the app in Microsoft Azure directory.

App Registration

You need to register the app in Microsoft Azure to generate the Client Id, Tenant Id, and Object Id.

To register the App:

1. Access the Microsoft Azure portal.

2. Click View under Manage Microsoft Entra ID on the Microsoft Azure Home page.

3. Click App registrations in the left navigation pane.

4. Click New registration tab.

   1. In the Name box, enter the display name for this application.

   2. For Supported account types, select Accounts in this organizational directory only (AVEVA Solutions Limited only - single tenant).

   3. For Redirect URI (optional), specify the URI to get the authentication response.

5. Click Register.

   The app is registered in the Azure Directory.

Microsoft Entra ID Settings

In AVEVA Work Tasks, you can configure Microsoft Entra ID using the Farm Configuration Wizard. With this setting, the user is authenticated against Microsoft Entra ID provider and can access the AVEVA Work Tasks features.

To Configure Microsoft Entra ID Settings

6. On the Windows Start menu, point to Programs, point to AVEVA, point to Work Tasks, and then click Farm Configuration Wizard.

   The AVEVA Work Tasks Farm Configuration Wizard appears.

7. Click Next.

   The Edit AVEVA Work Tasks Farm Settings window appears.

8. Select Service settings.

   The Enterprise Server settings can be selected if the Farm Server Installation is using Enterprise Server Installation.

9. Click Next.

   The Services/Global Settings window appears.

10. Click against Global Settings.

11. In the Global Settings window, select OpenID Settings tab.

12. In the Tenant ID box, enter the tenant ID of the Microsoft Entra ID instance.

13. In the Client ID box, enter the client ID of the Microsoft Entra ID instance.

14. In the Client Secret box, enter the client secret key of the Microsoft Entra ID instance.

15. Click Save and then click OK.

Note:
- If you log out from the Central Configuration (CC) site, you are also logged out from the Enterprise Console (EC) site. To access the EC site again, you need to access the EC URL, provide the access credentials, and then continue to use the EC site.

- The Microsoft Entra ID provider is listed in the Resource Provider drop-down list. But if you create the repository with this Microsoft Entra ID provider, it will work only when you configure Microsoft Entra ID through the Farm Configuration Wizard.

- Once you configure Microsoft Entra ID from Farm Configuration Wizard,
-- the Application Pool of Central Configuration changes to AVEVA Work Tasks Integrated Mode.
-- while accessing the Enterprise Console and Central Configuration, you are redirected to the Microsoft Online Page for authentication.

- When the environment is configured to Microsoft Entra ID, the following are not supported:
-- Synchronize Users
-- Electronic Signature
-- Disable Users from Microsoft Entra ID
-- Security Workflow
-- Wizard for Human Activities (In Assign Actors property of Human Activities while building the filter condition, the ‘IN’ and ‘Not In’ operators are not supported.)
-- Role Condition Set through Filter Condition of To Property in the Human Activity
-- The user’s display name with characters like # and ^
-- System Platform IDE

- The user or role search uses the starting character that you enter and does not have any search.

- You cannot have both the AVEVA Identity Manager (AIM) and Microsoft Entra ID user providers together.

- Scheduler Event Association installed through package does not work in Microsoft Entra ID when logged-in user's display name has special characters.

- To access Microsoft Entra ID repository, the user must use HTTPS sites. The application does not support HTTP sites.