Install and Configure My1Login's Entra Directory Service (EDS)

Install and Configure My1Login's Entra Directory Service (EDS)

Entra Directory Service (EDS)

  1. Allows admins to control which users are synchronised from the Entra Directory to My1Login and provides seamless Single Sign-On (SSO) to the My1Login web application using Entra identities.

  2. Additionally, this functions as a credential decoder, allowing shared credentials to be decrypted by end users without requiring an admin session at the time of login.


Alert
Prerequisite: This guide assumes you have already registered the EDS application in Azure. If you haven’t please follow the guide below first:

Configuration:

Info
The following steps require 3 configuration settings from Azure. Please view the page linked below for help on how to find these values in Azure.

Step 1 - My1Login Web App Configuration

Info
Note: this step requires the user to have the “Entra Directory Sync” AccountRoleType within My1Login. If your user doesn’t have this, they can add it as a role for the My1Login user account that they will be using to configure the Entra Directory settings in My1Login.
  1. On the My1Login Admin Portal, navigate to Admin → Users → Entra Directory
  2. Enter the Tenant ID retrieved from Azure
    1. Enter a Filter:
      1. Separate filters are separated by parentheses (same as AD filter)
      2. Filter by Administrative Units by entering (AU=<Administrative Unit Name>)
      3. Filter by Groups by entering (Group=<Group Name>)
      4. Filter by a specific Group inside an Administrative Unit by entering (AU=<Administrative Unit Name>,Group=<Group Name>)     
                                In the example below:
                                - (AU=ACME CI Company,Group=Test Users) will find only users in group Test Users within administrative unit ACME CI company
                                - (AU=Fake Company) will find all users and groups within administrative unit Fake Company.
    1. Save Changes                                                             
  1. Go to Admin → Security → SSO Settings

  2. Click “Add OIDC IP Config”

  3. Name the button (i.e. Log in with Entra) - this is what will appear on the login page for your My1Login whitelabel

    1. Replace the <TENANT ID FROM ENTRA> values with the Tenant ID on Entra. Where to find these values can be done here: https://support.my1login.com/portal/en/kb/articles/finding-eds-configuration-values-in-azure

    2. Identity Provider Login URL is https://login.microsoftonline.com/<TENANT ID FROM ENTRA>/oauth2/v2.0/authorize

    3. Issuer is https://login.microsoftonline.com/<TENANT ID FROM ENTRA>/v2.0

  4. Tick “Show on Login Page”

  5. Save Changes

    Step 2 - EDS Configuration

    1. Install the EDS.

    2. Open the EDS. Navigate to the Server Settings tab and Log In as an Admin user. The API Key, Account Identifier, Security Token and Directory (Tenant) ID fields should autofill once logged in. The filter should also autofill.                                                                                                                                                        

    3. Fill in the Application (Client) ID and Client Secret fields with the values retrieved from Azure earlier. Click Update from Server, Validate and Save

    4. Navigate to the Service Control tab. The service can now be started.
    5. Once the service is running, you can click Synchronise All Entra Users Now and monitor the progress from the Tail Log tab


      • Related Articles

      • What is the Entra Directory Service (EDS) and how does it work?

        The My1Login Entra Directory Service (EDS) : - enables a Zero-Login experience for your My1Login users so adoption is guaranteed - provides the highest level of customer security by managing client-side encryption keys inside the secure perimeter of ...

      • My1Login EDS: Azure App Registration

        Registration of the My1Login EDS App within Azure The My1Login Entra Directory Service (EDS) : enables a Zero-Login experience for your My1Login users so adoption is guaranteed provides the highest level of customer security by managing client-side ...

      • Troubleshooting the EDS

        Sync Issues 1.1 Incorrect Configuration (Web) On My1Login web, the Entra Directory screen must be filled out with the following details: Tenant ID (needed to identify which Azure Tenant to sync from) Filter (needed to identify which Administrative ...

      • EDS Installation Pre-Requisites

        Technical Requirements Within Microsoft Entra ID Permission to create an Azure App Registration with privileges to read the directory Define AU or group objects to be synchronised Within My1Login Username & Password for the My1Login Service Account ...

      • How to find the EDS Configuration Values within Azure

        EDS Configuration Values To configure the Entra Directory Service (EDS), you will need the following three values from your Entra Directory application: Tenant ID – the unique identifier for your Entra Directory. Client ID – the application ID of the ...