Page History

Description

...

1. Register a new application in by navigating to "App registrations" and then selecting "New registration".
   Image Added
   Fill in the name and select appropriate account type, in this example we will use single tenant option. Set the "Redirect URI", use the Single Sign-On URL available in BMP SSO settings as the redirect URI.
   Image Added
2. After registering the app copy "Application (client) ID" from the app to the BMP SSO settings "Client ID" field.
3. Navigate to "Certificates & secrets" to generate new client secret by selecting "New client secret" under the "Client secrets" -tab.
   1. Define description and expiration for the secret and click "Add".
   2. After creating a new secret copy secret's value and enter it as the "Client secret" in BMP SSO settings.
4. Navigate to "API permissions" and grant admin consent for the "User.Read" API/Permission. This enables the system to check required user attributes need for the SSO authentication.
5. Navigate to "Authentication" and configure make sure "Redirect URIs" is configured. If this was already configured when creating new app registration, this step can be ignored.
   
   1. Use the Single Sign-On URL available in BMP SSO settings as the redirect URI.
6. Acquire "Issuer URL" from the "OpenID Connect metadata document".
   1. Open the document and locate "issuer" field from the document and copy the value to "Issuer URL" field in BMP SSO settings.

...