My1Login EDS: Azure App Registration

My1Login EDS: Azure App Registration

Registration of the My1Login EDS App within Azure 


Info
The My1Login Entra Directory Service (EDS) :
  1. enables a Zero-Login experience for your My1Login users so adoption is guaranteed
  2. provides the highest level of customer security by managing client-side encryption keys inside the secure perimeter of your enterprise network
  3. reduces IT administration effort by automating user account lifecycle management that is synchronised with your Entra directory. 

  • Sign into the Azure tenant that is to be synchronised with My1Login

  • Access Microsoft Entra ID:        

  • Click “App registrations” in the sidebar, then click “New registration”:


  • Enter a name for the application, i.e. My1Login
    Under “Supported account types”, select “Accounts in this organizational directory only”
    Under “Redirect URI”, select Web and enter the URI:
    - <M1L domain for environment>/Business/Oidc/HandleOidcResponse
    - e.g. For customer called ACME, this will be: https://acme.my1login.com/Business/Oidc/HandleOidcResponse
    Click “Register”                                                                                                          
  • In the sidebar, click “Authentication” and then click the Settings tab
    Under “Implicit grant and hybrid flows”, check both “Access tokens” and “ID tokens”
    Click Save
  • In the sidebar, click “API permissions”
    Click “Add a permission”
    Click “Microsoft Graph”                                          
  • Click “Delegated Permissions” and select the following:
    OpenId permissions:
    - email
    - openid
    - profile                                                                                                                                                                                                                                                                    
  • Go back to the top of the pack and click “Application permissions”, then select the following:
    - AdministrativeUnit → AdministrativeUnit.Read.All
    - Group → Group.Read.All
    - User → User.Read.All
    Click “Add permissions”                                                                                                                                                                                                                                  
  • Click “Grant admin consent for <tenant name>” and then click “Yes”