Only the tenant administrator may be able to set up the Modern Authentication for the Microsoft Entra ID (previously Azure Active Directory) integration. If you wish to locate the SharePoint/Tabular Data documentation, or the Project Online documentation, please navigate to the SharePoint Modern Authentication page, or to Project Online Modern Authentication page.
-
While logged in as a tenant admin for the client’s organization, log in to portal.azure.com.
-
Navigate to Microsoft Entra Admin Center.
-
Within the left navigation bar, click on App registrations.
-
On the top Left of the page, create a New Registration.
-
Name: Give the App Registration Name a title.
-
Supported Account types: Single Tenant.
-
Redirect URI (Optional): in the dropdown select "Web". For the URL specify the OnePlan url you use, example: https://my.oneplan.ai.
-
-
Click Register.
-
Once the registration has been completed, the App Registration page will load. Within the Essentials section, the Application (client) ID can be found.
-
On the navigation panel on the left, click on Certificates & Secrets.
-
Towards the middle-left of the page, click on + New Client Secret. The Add a Client Secret panel will expand on the right side of the browser.
Note
This is where a Description and the Expiration Date can be set according to the company’s policy.
-
Click Add. The panel will close, and the Client Secret will be in the middle of the page underneath the column labelled as Value.
Note
Please note that this value will only appear once, it is encouraged to save this value in a secure location should you need it a second time. Otherwise, it is best practice to create a whole new client secret for each time it is needed.
-
Once finished with the setting up the Client Secret, navigate to the API Permissions page (left navigation panel, beneath Manage).
-
Select Add A Permission.
-
Beneath the Microsoft APIs tab, select Microsoft Graph.
-
What type of permissions does your application require? Select Application Permissions.
-
In the dropdown selections, choose these permission levels:
-
User.Read.All
-
Group.Read.All
-
GroupMember.Read.All
-
-
Once the Permission levels have been selected, click Add Permissions.
-
In the API Permissions page, click Grant Admin consent for {Tenant Name}.
-
Click on Yes for the consent confirmation popup.
-
While logged into OneConnect, go to the Microsoft Entra ID Users to OnePlan integration.
-
In the Microsoft Entra ID setup page, type in the Primary Domain URL. This can be found in the Microsoft Entra Identity Overview Page (i.e., {TenantName}.onmicrosoft.com).
-
Type in the Client Id and Client Secret.
-
Click test to confirm that the connection works as intended. If there is a Connected Successfully notification at the top right of the browser page, proceed to click on Save.
Related to