Infisign UniFed with Microsoft OAuth2

This guide provides a step-by-step process for setting up Azure AD for OAuth.

Register Your Application

Step 1: Sign in at the Azure Portal (https://portal.azure.com/).

Step 2: Navigate to Microsoft Entra ID > App registrations > New registration.

Step 3: Enter a name for your application and select the user group.

Step 4: Set the Redirect URI (select Web) to your desired post-authentication redirect location (e.g., http://localhost:3000/callback for development).

Step 5: Click Register.

Note Your Application (Client) ID and Directory (Tenant) ID

Step 1: After registering your app, you'll be redirected to the app's overview page. Here, note the Application (client) ID and Directory (tenant) ID for future use.

Create a Client Secret

Step 1: In your app registration, navigate to Certificates & secrets > New client secret.

Step 2: Add a description and choose an expiration period for the secret.

Step 3: Click Add and immediately note the client secret value as it won't be retrievable later.

Configure Permissions (Optional)

Step 1: In your app registration, go to API permissions > Add a permission.

Step 2: Select the APIs your application requires access to and add the necessary permissions.

Step 3: Grant admin consent for the permissions if required.