Add Azure IdP

This procedure should be performed if the multi.idp.use flag is set to true only in the insight.var in the<installation drive>:\InSightManager\server\all\conf\insight installation directory.

Note: Verify that there are no active Identity Providers (IdP) in the system and you performed all the steps described in Set Up Identity Provider.
  1. To add a new Azure IdP, add the following information on the Identity Provider page:
    Field Name Input Value
    Provider Type <Azure Active Directory>
    Identity Provider Name <Identity Provider Name>

    Any unique name to identify this IDP in Calyx RIM. Example: Azure123

    Application Logout URI https://login.microsoftonline.com/common/oauth2/logout?post_logout_redirect_uri=http(s)://{server}:{port}/insight
    Access Token URI https://login.microsoftonline.com/{Azure AD Directory ID}/oauth2/token
    Client ID <Azure AD Application ID>
    Client Secret <The secret Key for Azure App registrations>
    Key Discovery URI https://login.windows.net/common/discovery/keys
    User Authorization URI https://login.microsoftonline.com/<Azure AD Directory ID>/oauth2/authorize
    Issuer Base URI https://sts.windows.net
    Tenant ID <Azure AD Directory ID>
    SSO Trusted Applications <CSV of application_ids for service such as InSightX or LES>
    Graph API URI https://graph.windows.net
    Graph API Version 1.6
  2. Save.
    The Azure IdP is added to Calyx RIM.
  3. Restart the Calyx RIM Manager service.