Microsoft Entra ID (Azure AD)

Microsoft Entra ID (Azure AD) Setup

Follow the Microsoft Entra ID guide to create an application or use an existing one.

Steps to Configure the Application

1. Save the following details:
   • Client ID
   • Client Secret
   • Tenant ID
2. Open the OpenID Configuration:
   • OpenID Configuration URL:

     https://login.microsoftonline.com/{tenant_id}/.well-known/openid-configuration

   • This contains required fields like:
     • Issuer
     • JWKS URI
     • Authorization URL
     • Token URL
     • Supported Scopes
3. Redirect URI:
   • Skip adding the Redirect URI initially.
   • This can be added later once the TrueFoundry service deployment is created.

Integration with TrueFoundry

• Use the values from the OpenID configuration in the integration.
• For Client Secret, you can:
  • Create a TrueFoundry Secret, or
  • Directly add the value.
• Include the mandatoryopenid scope, along with other required scopes (e.g., email, profile, etc.).
• Set JWT Source toID Token.

Example configuration