AzureAD OAuth2

To configure AzureAD OAuth2 for erwin Mart Portal authentication, follow these steps:

1. Log in to Microsoft Entra admin center.

2. Click App registrations and enter the necessary information as shown in the following image.

   

3. Click Register.

4. Go to Certificates & secrets.

   

5. Click New client secret and add Description. Then, click Add.

   

6. Copy the auto-generated value highlighted in the following image.

   

7. Click API Permissions > Application Permissions.

   

8. Search and expand Group and select Group.Read.All permission. Then, click Add permissions.

   

9. Search and expand User and select User.Read.All permission. Then click Add permissions.

   

10. Click Grant admin consent for Contoso.

    

11. Go to Authentication and click Add a platform.

    

12. Click Web.

    

13. Add Redirect URIs and click Configure.

    

14. Go to Overview and note the Application (client) ID and Directory (tenant) ID. Graph scope and Client Uri are default.

    
    You can now use these parameters on the Authentication tab while configuring erwin Mart Portal for SSO as shown in the following example image.

    

Adding Groups in erwin Mart Portal

To add your AzureAD groups to erwin Mart Portal, follow these steps:

1. In the Microsoft Entra admin center, click Groups > All groups > Download groups.
   A CSV file with all your groups is downloaded.

2. Log in to erwin Mart Portalas administrator.

3. Go to Application Menu > Users.
   The Users page appears.

   

4. Click .
   The Add User page appears.

   

5. Under User Type, select Azure AD Group User.

   

6. Under Group User, select the group that you want to add.

7. Click Submit.