Create Microsoft Entra Application
Login to Microsoft Azure: https://portal.azure.com/
Pop up the menu bar by clicking the ‘Hamburger’ in the top left:
Select ‘Microsoft Entra ID’:
Select ‘App registrations’:
Click ‘+New registration':
Complete the registration:
Enter a suitable Name: eg Naverisk SSO
Select “Accounts in this organizational directory only”
Select “Single-page application (SPA)” with the external URL of the Naverisk website eg https:/qascale.naverisk.com
Click ‘Register’
Take note of the displayed 'Application (client) ID' and the 'Directory (tenant) ID' values and record them for later usage:
Click ‘Certificates & secrets’
Click ‘+New client secret’
In the right side pane, enter a suitable Description eg Naverisk SSO and select the desired expiration period.
Click ‘Add’
Take note of and record the 'Value' as this will be required later on
Click ‘API permissions’ and check the granted permissions
User.Read is required.
offline_access, openid and profile appear to get added automatically when a SSO user logs in and grants permission for, on first logon.
Configuring Microsoft Entra in Naverisk
Navigate to Settings → Microsoft Entra
Select the Client you wish to allow MS Entra authentication for from the pop out list on the left
Then expand out the configuration using the chevron on the right:
Enter the Guids obtained when creating the Microsoft Entra Application:
Naverisk Tenant ID = Microsoft Entra Directory (tenant) ID
Naverisk Client ID = Microsoft Entra Application (client) ID
Naverisk Client Secret = Microsoft Entra Value
And click ‘Save’
The Integration should now show as ‘Connected’ in the top right:
Tick the Microsoft Entra Enabled checkbox and click 'Save' to enable Naverisk User Logons to switch to Entra as an authentication option:
When this option is enabled, Naverisk users can switch to switch to Entra as an authentication option
This can be done either by the user for themselves under Home → My Profile → Settings:
Or this can be done by a Naverisk Administrator under Settings → Users & Groups → Settings:
If this option is disabled, existing Users assigned to Microsoft Entra will continue to authenticate via Entra, but this will not be a selectable option for new user logons.
NOTE: For the Microsoft Entra to succesfully sign in, the configured User Email Address must match the MS Entra account login:
macOS Safari
Safari has an additional security option that prevents the Microsoft Entra authentication window from appearing.
This can be disabled with the following steps:
Open Safari
In the file Menu select Safari → Preferences
In the pop up window select Websites → Pop-up Windows
In the bottom right corner, change the ‘Block and Notify’ dropdown and set it to ‘Allow’
