Add Microsoft Entra ID authentication to your system
After you have prepared the Microsoft Entra admin center, you can add the Microsoft Entra ID authentication to your Neptune DXP - Open Edition.
Prerequisites
-
You have performed the tasks in the Microsoft Entra admin center.
Procedure
-
In the Neptune DXP - Open Edition Cockpit, go to Settings, and select System Settings.
-
In the Authentication tab, select Edit.
-
Select + Add and select Microsoft Entra ID.
Result: The Authentication dialog opens.
-
Enter a meaningful Name.
-
Select Active to activate this authentication method.
-
Select Show on Login page to show the login screen on the Neptune DXP - Open Edition Session Login Page.
-
Enter a Description.
-
Enter a Path to retrieve a Neptune DXP - Open Edition session (for example, open-edition-ad-bearer). You can add any string as a path.
-
In Identity Metadata, enter a link to a metadata document that contains information required for an app to sign-in.
-
From your Microsoft Entra ID account, enter the Tenant ID of your Neptune DXP - Open Edition.
-
Enter your application’s Client ID from the Microsoft Entra admin center.
-
Enter the Client Secret key that you generated in New client secret in the Microsoft Entra admin center.
-
Additional Scopes
-
Use silent signout in PWA tba
-
Use MSAl v2 tba
-
-
In Claims Assignment, select Add to add claims assignments.
-
If required, in Auto Assignment, assign roles and groups that you have defined in the Role and Security Group tools in the Cockpit.
-
In Custom Script, to modify the roles' assignment manually, optionally enter your own custom code .
For example, to log user details to view in the system logs when the authentication method is used and to use custom logic to affect the entered variables, enter the following in Custom Script:
log.info("XXuser",user); log.info("XXprofile",profile); log.info("Member of:"+ profile.memberof);
-
Select OK to save your input.
Result: The Authentication dialog closes.
-
In System Settings, select Restart to activate Microsoft Entra ID authentication.