How to Configure Microsoft Entra ID (Azure AD) OAuth in Bold BI
Azure Active Directory (Azure AD) OAuth is a powerful tool for securing your Bold BI applications. This guide will walk you through the process of configuring Azure AD OAuth within your Bold BI site.
Step-by-Step Guide
-
Access Azure Portal: Navigate to the Azure Portal and select Microsoft Entra ID.
-
App Registrations: From the navigation, choose the App registrations and then select the New Registration option.
-
Register New Application: Fill in the following details in the form and click Register:
- Application Name
- Supported account types -> Accounts in any organizational directory (Any Azure AD directory - Multitenant). If other Azure directory users don’t need to login, select Single tenant.
- Redirect URI -> https://{yourdomain}/signin-oauth
-
Create Client Secret: Once the application is created, navigate to Certificates & secrets and select New client secret option to create a new secret. Once the client secret is created, please copy the secret from the Value column.
-
Configure Authentication: Go to the Authentication Settings page in the site and fill in the following details and click Save.
- Provider Name – Any Name that will be displayed in the login screen
- Provider Logo – Upload the Azure Ad logo
- Authorization Endpoint - https://login.microsoftonline.com/organizations/oauth2/v2.0/authorize
- Token Endpoint – POST: https://login.microsoftonline.com/organizations/oauth2/v2.0/token
- User Information Endpoint – GET: https://graph.microsoft.com/oidc/userinfo
- Client ID – Get this value from the registered application overview page
- Client Secret – Value from the step 4.
- Scopes – openid,profile,email
-
Access Azure AD Login: Once the settings are configured, use the site URL to access the Azure AD login. Site URL Example: https://{domain.com}/bi/site/site1
By following these steps, you can successfully configure Azure AD OAuth in Bold BI. This will enhance the security of your Bold BI applications and provide a seamless login experience for your users.