๐Ÿ” Setting Up an OIDC Integration via AIP

๐Ÿ“ Step 1: Create a Custom OIDC Integration

  1. Log in to the AuthN Integration Portal (AIP).

  2. Click Add Integration and select Custom OIDC.

  3. You'll see several important fields. Copy these into a notepad before proceeding:

    • Client ID

    • Authorization Endpoint

    • OpenID Configuration (Discovery URL)

โ†ช๏ธ Step 2: Configure the Redirect URI

  1. In the Redirect URI field, enter the following exact URL:

    https://login.microsoftonline.com/common/federation/externalauthprovider

  2. Click Save to create the integration.

๐Ÿ”„ Step 3: Create an M365 Integration for the Domain

  1. Back in the AIP dashboard, create a new Microsoft 365 integration.

  2. During setup, add the specific domain you want to use for this OIDC flow.

    • โš ๏ธ Important: This must be the domain that matches the User Principal Names (UPNs) of all users in the target group.

  3. EAMs are assigned per group. Ensure all users who will use this OIDC login are in the same Azure AD/Entra ID group.