# User administration - Azure



# Register Entra application

Basic application setup

<table border="1" id="bkmrk-create-a-new-applica" style="border-collapse: collapse; width: 100%; height: 1427.5px;"><colgroup><col style="width: 74.4524%;"></col><col style="width: 25.6429%;"></col></colgroup><tbody><tr style="height: 456.513px;"><td style="height: 456.513px;">[<span style="color: #444444;">![image.png](https://help.abitsystems.com.au/uploads/images/gallery/2024-11/scaled-1680-/aO5image.png)</span>](https://help.abitsystems.com.au/uploads/images/gallery/2024-11/aO5image.png)

</td><td style="height: 456.513px;">Create a new application and allow Web URL of http://localhost</td></tr><tr style="height: 273.2px;"><td style="height: 273.2px;">[<span style="color: #444444;">![image.png](https://help.abitsystems.com.au/uploads/images/gallery/2024-11/scaled-1680-/W1eimage.png)</span>](https://help.abitsystems.com.au/uploads/images/gallery/2024-11/W1eimage.png)

</td><td style="height: 273.2px;">Record Application (client) ID and Directory (tenant) ID for future use.

Click Add a certificate or secret

</td></tr><tr style="height: 552.763px;"><td style="height: 552.763px;">[![image.png](https://help.abitsystems.com.au/uploads/images/gallery/2024-11/scaled-1680-/Jbqimage.png)](https://help.abitsystems.com.au/uploads/images/gallery/2024-11/Jbqimage.png)

<span style="color: #444444;">  
</span>

</td><td style="height: 552.763px;">Click new secret, and create an entry with required duration and name

</td></tr><tr style="height: 145.025px;"><td style="height: 145.025px;">[![image.png](https://help.abitsystems.com.au/uploads/images/gallery/2024-11/scaled-1680-/QkOimage.png)](https://help.abitsystems.com.au/uploads/images/gallery/2024-11/QkOimage.png)

</td><td style="height: 145.025px;">Copy the value.

<p class="callout danger">NOTE: you cannot view this value again.</p>

</td></tr></tbody></table>

### Allow groups for authentication restrictions

<table border="1" id="bkmrk-to-access-group-deta" style="border-collapse: collapse; width: 100%;"><colgroup><col style="width: 73.8572%;"></col><col style="width: 26.2381%;"></col></colgroup><tbody><tr><td>[![image.png](https://help.abitsystems.com.au/uploads/images/gallery/2024-11/scaled-1680-/hUvimage.png)](https://help.abitsystems.com.au/uploads/images/gallery/2024-11/hUvimage.png)

</td><td>To access group details the API needs Group.Read.All application permission </td></tr><tr><td>[![image.png](https://help.abitsystems.com.au/uploads/images/gallery/2024-11/scaled-1680-/x3Ximage.png)](https://help.abitsystems.com.au/uploads/images/gallery/2024-11/x3Ximage.png)

</td><td>Select Microsoft Graph</td></tr><tr><td>[![image.png](https://help.abitsystems.com.au/uploads/images/gallery/2024-11/scaled-1680-/CZwimage.png)](https://help.abitsystems.com.au/uploads/images/gallery/2024-11/CZwimage.png)

</td><td>Select delegated permissions and search for group to add Group.Read.All</td></tr><tr><td>[![image.png](https://help.abitsystems.com.au/uploads/images/gallery/2024-11/scaled-1680-/1vgimage.png)](https://help.abitsystems.com.au/uploads/images/gallery/2024-11/1vgimage.png)

</td><td>Confirm admin consent</td></tr></tbody></table>

# Update global settings

You will need the Azure clientid, applicationid and secret from the [Azure Application](https://help.abitsystems.com.au/books/service-scheduler-administration-guide/page/register-entra-application "Register application")

<table border="1" id="bkmrk-start-the-service-sc" style="border-collapse: collapse; width: 100%;"><colgroup><col style="width: 65.4048%;"></col><col style="width: 34.6905%;"></col></colgroup><tbody><tr><td>[<span style="color: #444444;">![image.png](https://help.abitsystems.com.au/uploads/images/gallery/2024-11/scaled-1680-/m91image.png)</span>](https://help.abitsystems.com.au/uploads/images/gallery/2024-11/m91image.png)

</td><td>Start the Service Scheduler Install / Upgrade wizard on the server</td></tr><tr><td>[<span style="color: #444444;">![image.png](https://help.abitsystems.com.au/uploads/images/gallery/2024-11/scaled-1680-/km4image.png)</span>](https://help.abitsystems.com.au/uploads/images/gallery/2024-11/km4image.png)

</td><td>Click next until the Account Settings page and select "Global"</td></tr><tr><td>[<span style="color: #444444;">![image.png](https://help.abitsystems.com.au/uploads/images/gallery/2024-11/scaled-1680-/Whrimage.png)</span>](https://help.abitsystems.com.au/uploads/images/gallery/2024-11/Whrimage.png)

</td><td>Set sso\_entra\_enabled to 1

Add the azure application details to appropriate value clientid, secret and tenantid

</td></tr></tbody></table>

### Stop service scheduler for prompting for account on login

<table border="1" id="bkmrk-to-stop-the-prompt-a" style="border-collapse: collapse; width: 100%;"><colgroup><col style="width: 50%;"></col><col style="width: 50%;"></col></colgroup><tbody><tr><td>[![image.png](https://help.abitsystems.com.au/uploads/images/gallery/2024-11/scaled-1680-/KZpimage.png)](https://help.abitsystems.com.au/uploads/images/gallery/2024-11/KZpimage.png)

</td><td>To stop the prompt adjust global setting sso\_entra\_authorize\_endpoint</td></tr><tr><td>[![image.png](https://help.abitsystems.com.au/uploads/images/gallery/2024-11/scaled-1680-/bzrimage.png)](https://help.abitsystems.com.au/uploads/images/gallery/2024-11/bzrimage.png)

</td><td>[https://login.microsoftonline.com/%tenantid%/oauth2/v2.0/authorize?client\_id=%clientid%&amp;response\_type=code&amp;redirect\_uri=%redirect\_uri%&amp;response\_mode=query&amp;scope=%scope%&amp;prompt=select\_account](https://login.microsoftonline.com/%tenantid%/oauth2/v2.0/authorize?client_id=%clientid%&response_type=code&redirect_uri=%redirect_uri%&response_mode=query&scope=%scope%&prompt=select_account)

Remove the &amp;prompt=select\_account to disable.

</td></tr></tbody></table>

# Limit access to groups / UPN

<p class="callout info">For groups to work the Microsoft Entra application will need [Group.Read.All](https://help.abitsystems.com.au/books/service-scheduler-administration-guide/page/register-entra-application "Register Entra application") permission</p>

<table border="1" id="bkmrk-select-settings-loca" style="border-collapse: collapse; width: 100%;"><colgroup><col style="width: 68.9683%;"></col><col style="width: 31.1111%;"></col></colgroup><tbody><tr><td>[![image.png](https://help.abitsystems.com.au/uploads/images/gallery/2024-11/scaled-1680-/dElimage.png)](https://help.abitsystems.com.au/uploads/images/gallery/2024-11/dElimage.png)

</td><td>Start the Service Scheduler install and upgrade wizard</td></tr><tr><td>[![image.png](https://help.abitsystems.com.au/uploads/images/gallery/2024-11/scaled-1680-/9bFimage.png)](https://help.abitsystems.com.au/uploads/images/gallery/2024-11/9bFimage.png)

</td><td>Select settings</td></tr><tr><td>[![image.png](https://help.abitsystems.com.au/uploads/images/gallery/2024-11/scaled-1680-/djPimage.png)](https://help.abitsystems.com.au/uploads/images/gallery/2024-11/djPimage.png)

</td><td>Locate the settings sso\_entra\_allow\_groups and sso\_allow\_upn\_suffix</td></tr><tr><td>[![image.png](https://help.abitsystems.com.au/uploads/images/gallery/2024-11/scaled-1680-/Vu9image.png)](https://help.abitsystems.com.au/uploads/images/gallery/2024-11/Vu9image.png)

</td><td>To limit access to certain group, add the group names separated by the ";" character.</td></tr><tr><td>[![image.png](https://help.abitsystems.com.au/uploads/images/gallery/2024-11/scaled-1680-/nT6image.png)](https://help.abitsystems.com.au/uploads/images/gallery/2024-11/nT6image.png)

</td><td>To limit to user UPN suffix enter the userPrincipalName suffix</td></tr></tbody></table>