Azure Application Setup

The Azure Entra Application setup process is described below. These steps below should guide you through the entire process.

Before you begin, please note: Azure requires an SSL certificate to be installed on your site for authentication to work. You will not be able to add Azure authentication if your site cannot be reached over https.

    1. Log into the Azure Entra Portal.
    2. Navigate to: Microsoft Entra ID and click View
    3. Click into the App Registrations tab.
    4. Click the 'New registration' link.Azure Application - New Registration
    5. Fill out the Name - A title for your application. Your website title is a good example.
      Azure Entra Client ID
    6. Select the appropriate Supported Account Types option for your site.
    7. Fill out the Redirect URI's for your website. This should be your full Homepage URL with index.php at the end. Add the following URL (replacing yourdomain.com with your actual domain name). Redirect URIs are restricted to https and if you have other ways to access your domain (like www and non-www), add them all here, like the following:
      https://yourdomain.com/index.php
      https://www.yourdomain.com/index.php
    8. Click the 'Register' button.
    9. Click on the 'Authentication' link in the Manage menu.Azure Application - Auth Menu
    10. In Settings > Live SDK Support - We have this switched to No in our application.
    11. In Settings > Implicit grant and hybrid flows - We have 'Access Tokens' and 'ID tokens' set to no in our application.
    12. Don't forget to click the 'Save' button at the top of the page.
    13. Go to the Application's overview page and copy the application id. This will be used in the JFBConnect setting for Azure AD Client ID.Azure AD Client ID
    14. Click on the 'Certificates & secrets' link in the Manage menu.
    15. Click the 'New Client Secret' button. Fill out a description, length of time for the secret to be valid and click the 'Add' button.Azure Application - Client Secret
    16. A new client secret will be created and only displayed one time in a popup window. Make sure to copy this value for later use. If you forget, you can delete the secret and generate a new value.Azure AD - Copy Client Secret from this column
    17. Use this Application Secret (described in steps 12-14) in the JFBConnect settings for Azure Client Secret. At this point, JFBConnect is ready for Azure authentication.