Integrating Microsoft Entra (OIDC)

A new client application in your MS Entra is required.

Register a new client application

Go to Application Creation to create a new application.

1. Choose a relevant name such as 'ABAX SSO'.

2. Choose 'Single Tenant' as the 'Supported account types' option.

3. Redirect URI - Web - https://auth.abax.cloud/ui/login/login/externalidp/callback

4. Click 'Register'.

Add client secret

A client secret is required for us to access the application.

1. Click 'Certificates & secrets'

2. Click 'New client secret', enter a description, expiry date and add the secret

3. Save the value of the secret after it is created. You will not be able to see this value again. If you lose the secret before you configure SSO in ABAX, you will have to create a new one.

Token configuration

Some information needs to be included in the authentication token when it's sent to ABAX.  

1. Click 'Token configuration'

2. Click 'Add optional claim'

3. Select id token as the token type and select email as claim.
   

API permissions  

ABAX needs some API permissions for the application, to authenticate and read user details.  

1. Click 'API Permissions'

2. Add email, profile, User.Read and openid from Microsoft Graph permissions.  
   

Set up on the ABAX platform

1. In the SSO configuration wizard, select Microsoft Entra ID (OIDC authentication)

2. Enter the Application Client ID and Client Secret

3. Click 'Finish'

4. Your configuration details will be shown after ABAX has configured your installation. Verify that the configuration works correctly by logging out and logging in again via SSO