Microsoft Active Directory

Project Creation

1. Global External Service Provider name: user input
2. Global External Service Provider name: user input
3. Domain Name: The domain of the AD server, for example: insightfinder.com
   1. Domain Name: The domain of the AD server, for example: insightfinder.com
   2. Domain Name: The domain of the AD server, for example: insightfinder.com
4. Server Address: The server address where AD is hosted, for example: abc.insightfinder.com
5. Bind user id, Client secret: The account that bind the AD server and the password of the bind user, not required, if provided IF can grab all the groups within the server for selection
6. Group List: giving a group of users in AD access to IF and assign roles in IF, can also choose System when selecting group, and this System will be automatically shared with all new users from this AD group. Example for group: CN=IF-user-accounts, OU=Dynamic, OU=Groups, DC=insightfinder, DC=com

Project Configuration

1. You need to have a subscription with MS Azure. When you click into the subscription, you will get your subscription Id.(See Figure 7 and 8)
2. Go to “Azure Active Directory” and then “App Registration”. Register a new app. Once your app is registered, you can go into the app and get a client Id and tenant ID.(See Figure 9 and 10)
3. Then you can generate the client secret by going to the “certificates & secrets” page.(See Figure 11)
4. Next step is to add permission to the app. Go to the IAM page for a subscription. And “Add role assignment”.(See Figure 12)
5. Select the “Reader” role for this app.(See Figure 13)
   
6. On the next screen, select “User, group or service principal”. A side bar will appear on the right. Search for your app there, select it and complete that step. You app will get the reader role.(See Figure 14)
7. Once you complete it, you are ready with all the required credentials to integrate with InsightFinder.