Skip to main content

Application Settings Configuration for Microsoft Entra ID (Azure) - SSO

The Azure Portal Configuration values must be configured in the Analysis Server appsettings.config file to enable communication between the Azure registered application and the Open iT Analysis Server.

Follow these steps to configure the Analysis Server application settings:

  1. Go to the installation directory located, by default, in C:\Program Files\OpeniT\Analysis Server.

  2. Open the configuration file appsettings.config using any text editor.

  3. Provide the values of the following keys:

    appsettings.config
    <add key="ida:ClientId" value="" />
    <add key="ida:Tenant" value="" />
    <add key="ida:AADInstance" value="" />
    <add key="ida:PostLogoutRedirectUri" value="" />
    <add key="ida:RedirectUri" value="" />
    <add key="ida:Domain" value="" />
    <add key="ida:TenantId" value="" />
    <add key="ida:ClientSecret" value="" />
    <add key="ida:UseIdTokenHintForLogout" value="" />

    Refer to the following table for the value required for each parameter:

    ParameterDescription
    ClientIdSpecify the Application (client) ID of the registered application. This value is available on the Overview page of the application in the Microsoft Azure Portal.
    Tenant, DomainSpecify the domain name of the Active Directory deployed in the Microsoft Azure Portal.
    AADInstanceSpecify the Microsoft Entra ID sign-in endpoint. Set this parameter to https://login.microsoftonline.com/.
    PostLogoutRedirectUriSpecify the Front-channel logout URL of the registered application. This value should match the URL configured during application registration(Step no.9).
    RedirectUriSpecify the redirect URI of the registered application. This value should match the URL configured during application registration(Step no.9).
    TenantIdSpecify the Directory (tenant) ID of the Microsoft Entra ID tenant. This value is available on the Overview page of the registered application in the Microsoft Azure Portal.
    ClientSecretSpecify the client secret of the registered application. This value is generated in Step 13 of the Azure Portal Configuration - Application Registration section.
    UseIdTokenHintForLogoutSpecify false. Microsoft Entra ID does not require the ID token to be included in the logout request.
    Parameters for appsettings.config
    Example appsettings.config Configuration
    <add key="ida:ClientId" value="12345678-abcd-1234-abcd-1234567890ab" />
    <add key="ida:Tenant" value="87654321-dcba-4321-dcba-0987654321fe" />
    <add key="ida:AADInstance" value="https://login.microsoftonline.com/" />
    <add key="ida:PostLogoutRedirectUri" value="https://as.openit.com:8443/" />
    <add key="ida:RedirectUri" value="https://as.openit.com:8443/signin-oidc" />
    <add key="ida:Domain" value="openit.onmicrosoft.com" />
    <add key="ida:TenantId" value="87654321-dcba-4321-dcba-0987654321fe" />
    <add key="ida:ClientSecret" value="abcdefghijklmnopqrstuvwxyz1234567890" />
    <add key="ida:UseIdTokenHintForLogout" value="false" />

  4. Open IIS (Internet Information Services) Manager.

  5. In the Connections pane, click Application Pools.

  6. In the list of Application Pools, select Open iT Analysis Server Application Pool.

  7. In the Actions pane, click Stop.

  8. Wait for 10 seconds and click Start.

    Restart Application Pool

    Restart Application Pool