Skip to main content

Microsoft Entra ID Microsoft Entra ID

Microsoft Entra ID stores information about objects on the network and makes this information easy for administrators and users to find and use. Microsoft Entra ID uses a structured data store as the basis for a logical, hierarchical organization of directory information.

Creating an Microsoft Entra ID connection​

Use one of the following methods to make a connection:

Stage One: Azure Portal​

Obtaining the Credentials​

note

Please note, when you hover when you move your cursor to the lower part of the arcade screen, navigation tabs will emerge. These tabs enable you to freely navigate through the tutorial at your convenience.

Obtaining the Credentials Written Step-By-Step Guide​

  1. Log into the Azure Portal.

  2. Go to the Microsoft Entra ID resource.

  3. In the left-hand menu, click App registrations.

  4. Select the app for which you want to grant permission.

  5. In the left-hand menu, click API permissions.

  6. Click Add a permission and select Microsoft Graph.

  7. Click Application permissions and select the following permission:

    • User.ReadWrite.All
    • GroupMember.ReadWrite.All
    • Group.ReadWrite.All
    • Directory.AccessAsUser.All
    • IdentityRiskyUser.Read.All
    • IdentityRiskyUser.ReadWrite.All

  8. Click Add permissions to save the changes.

  9. Click Grant admin consent for <your tenant> on the API permissions page.

Creating your Connection Using OAuth or Using App Registration​

Creating your Connection Using OAuth Written Step-By-Step Guide​

  1. In the Blink platform, navigate to the Connections page > Add connection. A New Connection dialog box opens displaying icons of external service providers available.
  2. Select the Microsoft Entra ID icon. A dialog box with name of the connection and connection methods appear.
  3. (Optional) Edit the name of the connection. At a later stage you cannot edit the name.
  4. Click Microsoft Entra ID to authenticate using OAuth.
  5. Sign in using your credentials.

Creating your Connection Using App Registration Written Step-By-Step Guide​

To create the connection you need:

  • A client ID
  • A client secret
  • A tenant ID
  1. In the Blink platform, navigate to the Connections page > Add connection. A New Connection dialog box opens displaying icons of external service providers available.
  2. Select the Microsoft Entra ID icon. A dialog box with name of the connection and connection methods appear.
  3. (Optional) Edit the name of the connection. At a later stage you cannot edit the name.
  4. Select App Registration as the method to create the connection.
  5. Fill in the parameters:
    • The client ID
    • The client secret
    • The tenant ID
  6. (Optional) Click Test Connection to test it.
  7. Click Create connection. The new connection appears on the Connections page.

Creating your Connection Using LDAP Written Step-By-Step Guide​

Microsoft Entra ID supports administration using the LDAP protocol, allowing you to manage your workspace using Blink's LDAP actions instead of the Microsoft Entra ID integration.

In order to expose your Microsoft Entra ID workspace as an LDAP server, follow these steps:

  1. Set up an Microsoft Entra ID Domain Services managed domain.
  2. Access the domain controller's virtual subnet.
  3. If your runner is running on premises and connected to the Azure virtual subnet, your LDAP server URL is the domain controller's IP address.
  4. Otherwise, in order to use an external runner, you need to add a public IP to the virtual subnet and assign it to your domain controller.
  5. To create an LDAP connection to this server:
    • Use the IP address accessible to the runner as your URI, with ldap:// protocol, or ldaps:// if you enabled "Secure LDAP"
    • Acquire the Distinguished Name of an Microsoft Entra ID user who has permissions to the server. You can use dsquery on a connected Windows Server to obtain the full name of a user.
    • Use the password of the specified user. After activating your domain controller, the user should reset their password so that it is properly synced.