Skip to main content

Set up the Microsoft sign-in

Your users sign in to Astrolabe with their Microsoft Entra ID account, with the button Continue with Microsoft on the sign-in page.

You set it up once, as an administrator.

The Microsoft sign-in itself was not checked: the button stays greyed on an instance without an active license, and no Microsoft user account was at hand. This step was not checked on a live instance.

Before you start​

You need:

  • an active license (Administration › Licensing);

  • an app registration in Microsoft Entra ID, with a client secret. Keep its Application (client) ID, its Directory (tenant) ID and the Value of its client secret;

  • the redirect URL declared on that app registration, which is the address of your Astrolabe followed by /api/auth/microsoft/handler/frame. For example:

    https://astrolabe.exemple.com/api/auth/microsoft/handler/frame

🔧 Add the provider​

  1. In the left sidebar, at the bottom, click Administration.

  2. Under PLATFORM, click Authentication. The Providers tab opens.

  3. On the Azure card, click the switch. The window Configure Azure opens.

  4. Fill in the form. Each ? next to a label explains the field.

    FieldWhat to enterExample
    Client IDThe Application (client) ID
    Client SecretThe Value of the client secret, not the Secret ID
    Tenant IDThe Directory (tenant) ID
    Domain HintOptional. Your organization's domain, to skip Microsoft's account picker.exemple.com
    Skip User ProfileOptional. Tick it so Astrolabe does not read the user's profile and photo from Microsoft Graph, if the app may not call Graph.

  5. Click Install. A banner says The configuration has changed; the server is restarting.

About a minute later, the Azure card is at the top of the list, with a Configure button.

🚪 See the button​

  1. Top right, click your name, then Logout.

  2. The sign-in page shows Continue with Microsoft.

On an instance without an active license, the button is greyed and the page says Sign-in disabled: license is not active. Sign in with your username and password, and activate the license.

✅ That's it!

Next: Common problems.