Create Microsoft Entra ID App

  1. Goto Azure Portal

  2. Open Microsoft Entra ID by searching it

  3. Click on App-Registration on the left-side

  4. Click on New registration

New registration

  1. Choose a name of your choice e.g., ivy

  2. Define a Redirect URI of type Web which points to your Axon Ivy Engine: https://ivy.ivyteam.io/oauth2/callback

The pattern of this URI is https://{host}/oauth2/callback . Therefore, you need to adjust the host in this URL.

  1. Click on Register

  1. Click on API permissions

  2. Click on Add a permission

  3. Choose Microsoft Graph

  4. Administrator privileges are required to execute steps 9 - 11:

  5. Choose Application permission

  6. Type Directory.Read.All

  7. Click on Add

Permission
Grant Permission

  1. Click on Grant admin consent

  2. Click on Certificates & secrets

  3. Click on New Client Secret

  4. Enter a description, e.g., ivy

  5. Click on Add

  6. Copy the value of this secret. This is needed later to configure the Axon Ivy Engine.

    Secret

  7. Go to Overview

Secret

  1. Application ID and Directory (tenant) ID is needed to configure Axon Ivy Engine.