• You will first need to login to the Azure Portal. Once logged in, navigate to Azure Active Directory > App Registrations > New Registration to create a new Azure Active Directory Application.

• Enter Name, and select Accounts in any organizational directory (Any Microsoft Entra ID tenant - Multitenant). Then in Redirect URI (optional), select Web and enter the following URL:

https://login.puredome.com/oauth2/callback

• Under the Overview > Essentials section, note the Application (client) ID and the Directory (tenant) ID. These will be used respectively as the Client ID value and to construct the Issuer URL value in your PureDome Identity provider configuration.

• Now, you need to create a new Azure AD application secret. Navigate to Azure Active Directory > App Registrations > {Your Application - in our case PureDome} > Certificates & secrets > New client secret to create a new Azure AD application client secret. Copy this Value ID into a text file for later use. 

• The Microsoft URL may diff across national clouds, so you will need to review the Microsoft documentation to ensure you have the correct URL for your region. For the Microsoft global Azure AD service, the URL is as follows, where {tenantId} is the Directory (tenant) ID previously noted while creating our Azure AD Application.

https://login.microsoftonline.com/{tenantId}/v2.0

• In the application, go to Users and groups, and click + Add user/group. Choose who should have access, and click Assign.

• Now, you can head to the PureDome console on your browser, and navigate to Preferences and Single Sign-On. By choosing Azure you will be asked to enter four values as follows:
  
  
  1. IDP Name: Any name you want
  2. Client ID: Value copied from Microsoft Azure dashboard 
  3. IDP Client Secret: Value copied from Microsoft Azure dashboard (Value ID)
  4. Issuer URL: URL created in Step 3 (Configuring the Issuer URL)

• After completing all the steps above, you have successfully set up an OIDC application on your Microsoft 365/ Azure Active Directory (Azure AD) with SSO enabled for PureDome.