Install and Configure My1Login's Entra Directory Service (EDS)

Install and Configure My1Login's Entra Directory Service (EDS)

Entra Directory Service (EDS)

  1. Allows admins to control which users are synchronised from the Entra Directory to My1Login and provides seamless Single Sign-On (SSO) to the My1Login web application using Entra identities.

  2. Additionally, this functions as a credential decoder, allowing shared credentials to be decrypted by end users without requiring an admin session at the time of login.


Alert
Prerequisite: This guide assumes you have already registered the EDS application in Azure. If you haven’t please follow the guide below first:

Configuration:

Info
The following steps require 3 configuration settings from Azure. Please view the page linked below for help on how to find these values in Azure.

Step 1 - My1Login Web App Configuration

Info
Note: this step requires the user to have the “Entra Directory Sync” AccountRoleType within My1Login. If your user doesn’t have this, they can add it as a role for the My1Login user account that they will be using to configure the Entra Directory settings in My1Login.
  1. On the My1Login Admin Portal, navigate to Admin → Users → Entra Directory
  2. Enter the Tenant ID retrieved from Azure
    1. Enter a Filter:
      1. Separate filters are separated by parentheses (same as AD filter)
      2. Filter by Administrative Units by entering (AU=<Administrative Unit Name>)
      3. Filter by Groups by entering (Group=<Group Name>)
      4. Filter by a specific Group inside an Administrative Unit by entering (AU=<Administrative Unit Name>,Group=<Group Name>)     
                                In the example below:
                                - (AU=ACME CI Company,Group=Test Users) will find only users in group Test Users within administrative unit ACME CI company
                                - (AU=Fake Company) will find all users and groups within administrative unit Fake Company.
    1. Save Changes                                                             
  1. Go to Admin → Security → SSO Settings

  2. Click “Add OIDC IP Config”

  3. Name the button (i.e. Log in with Entra) - this is what will appear on the login page for your My1Login whitelabel

    1. Replace the <TENANT ID FROM ENTRA> values with the Tenant ID on Entra. Where to find these values can be done here: https://support.my1login.com/portal/en/kb/articles/finding-eds-configuration-values-in-azure

    2. Identity Provider Login URL is https://login.microsoftonline.com/<TENANT ID FROM ENTRA>/oauth2/v2.0/authorize

    3. Issuer is https://login.microsoftonline.com/<TENANT ID FROM ENTRA>/v2.0

  4. Tick “Show on Login Page”

  5. Save Changes

    Step 2 - EDS Configuration

    1. Install the EDS.

    2. Open the EDS. Navigate to the Server Settings tab and Log In as an Admin user. The API Key, Account Identifier, Security Token and Directory (Tenant) ID fields should autofill once logged in. The filter should also autofill.                                                                                                                                                        

    3. Fill in the Application (Client) ID and Client Secret fields with the values retrieved from Azure earlier. Click Update from Server, Validate and Save

    4. Navigate to the Service Control tab. The service can now be started.
    5. Once the service is running, you can click Synchronise All Entra Users Now and monitor the progress from the Tail Log tab