Microsoft Entra ID

​

Prerequisites

1. Admin access to the Azure portal.
2. Access to a StarTree environment.
3. Obtain the redirect URI from StarTree.

​

Steps

​

Register the StarTree App

1. Navigate to the Microsoft Azure portal.
2. Select Microsoft Entra ID from the portal menu.

3. Click on Add and select App registration to register a new app.
4. Specify a name for the application and select the supported account types option that fits your needs. 
5. Under Redirect URI, select Web as the platform, and enter the URL that was provided by StarTree.

6. Register the application.
7. Copy the Application (client) ID and the Directory (tenant) ID. You will need to provide these to StarTree.
8. Click Add a certificate or secret and create a new client secret. Save the client secret Value. You will need to provide this to StarTree.
9. Make sure the users have the email address field populated.

​

Provide the following details to StarTree

• Application (client) ID.
• Directory (tenant) ID.
• Client secret.
• Issuer URL: https://login.microsoftonline.com//v2.0 (replace the tenant ID with the actual value).

​

[Optional] Enable Groups Claim

To enable groups claim for an application in Azure AD for OpenID Connect, complete the following steps:

1. Select Azure Active Directory from the left navigation menu.
2. Select App registrations. 
3. Select the application you just created.
4. Select Token configuration from the left navigation menu 

5. Click the + Add groups claim button and select the types of groups you want to include in the claim.
6. Once you save the groups claim, click API permissions.

7. Click on + Add a permission.
8. Select Microsoft Graph and then Delegated permissions.
9. Scroll down to the Directory category, expand it, then check Directory.Read.All

10. Click Add permissions.
11. When prompted, click Yes to grant admin consent.

​

Granting User and Group Access to StarTree

1. Use the Azure portal search bar to search for Enterprise applications.
2. Select the application you created.
3. In the left navigation menu, expand the Manage menu and click on Users and Groups.

4. Click + Add user/group and add the users and groups that you want provide access to StarTree.
5. Click on Assign.