Riva Insight On-Premises Prerequisites - Microsoft Entra Id App Registration

Curtis Massie
Curtis Massie
  • Updated

Start a new App Registration

  1. Click into the search at the top
  2. Type in 'App registration'
  3. Select 'App registrations' from the list of results

  1. From the App registrations page, click on 'New registration'

Basic Information

  1. Fill out the Information for the new Entra Id App Registration so that it is clear that it is for use with Riva Insight
  2. Under 'Supported account types', select 'Single tenant only'
  3. Under 'Redirect URI', select 'Single-page Application (SPA)'
  4. Add the Redirect URI in format brk-multihub://{insightFQDN}:{port}
    For example: brk-multihub://riva.myorg.local:5001 
  5. Click on 'Register' when complete

Note:

  • The callback URLs must be all in lowercase
  • Multiple callback urls can be added after completing the initial app registration (refer to next section: Adding Additional Redirect URIs)
  • dnsname is fully qualified domain name (fqdn)
  • port default is 5001 is (can be changed during the Insight setup)
  • basepath default is insight  (can be changed during the Insight setup)
  • exclude the port if using 443 as the Insight port

If behind a load balancer:

  • Ensure the front-end Insight url is added (exclude the port if using 443)
  • After completing the initial app registration, add both the local server urls and load balancer urls to aid with validation/troubleshooting (refer to next section: Adding Additional Redirect URIs)

Adding Additional Redirect URIs

Add additional Redirect URIs for any other urls or ports that will be use to access Riva Insight.

  1. In the App registration, search for 'Authentication'
  2. Select 'Authentication' (or 'Authentication (Preview)')
  3. Select 'Single-page application'
  1. Add the additional Redirect URIs
  2. Click on 'Configure' when done adding all the additional Redirect URIs

Refer to the note under Basic Information for URI formating

 

  1. A confirmation dialog will be displayed after adding the redirect URIs

Optional - Adding URIs for validation and troubleshooting direct from browser

In order to sign into Riva Insight directly from a browser (outside of Outlook), additional redirect URIs are required. They are not required for normal operation of Riva Insight from a browser, however is useful for validation and troubleshooting of authentication related issues.

Add additional Redirect URIs for any other urls or ports that will be use to access Riva Insight.

  1. In the App registration, search for 'Authentication'
  2. Select 'Authentication' (or 'Authentication (Preview)')
  3. This time, select 'Web' instead of 'Single-page application'
  1. Add the Redirect URI in format https://{insightFQDN}:{port}/{basepath}/graphfallback/authorize
    For example: https://{insightFQDN}:{port}/insight/graphfallback/authorize 
    • The basepath default is 'insight' and port default is '5100'
  2. Click on 'Configure' when done adding all the additional Redirect URIs

Refer to the note under Basic Information for URI formating

  1. A confirmation dialog will be displayed after adding the redirect URI

  1. Repeat the steps for any additional Redirect URIs

Add Microsoft Graph API Permissions

  1. In the App registration, search for 'API'
  2. Select 'API Permissions' 
  3. Select 'Add a Permission'
  1. On the 'Select an API' page, under the 'Microsoft APIs' tab select 'Microsoft Graph'
  1. On the 'Microsoft Graph' page, select 'Delegated permissions'

  1. Under 'Select Permissions', search for and select the following permissions:
    • OpenId Permissions
      1. email
      2. offline_access
      3. openid
      4. profile
    • User
      1. User.Read
      2. User.ReadBasic.All
    • Calendars
      1. Calendars.ReadWrite.Shared
    • Mail
      1. Mail.ReadWrite.Shared
  2. Once done selecting the permissions, click on 'Add permissions'
  1. The page will display the configured permissions

 

Provide Admin Consent

  1. On the same page, click on 'Grant admin consent for ...'
    • If you navigated away you can get back to the page by searching for and clicking on 'API Permissions'

 

  1. A prompt will appear asking for confirmation to grant admin consent
  2. Click on 'Yes'

  1. A status message will be displayed confirming consent has been granted

Access Application (client) ID

  1. For the App Registration, click on 'Overview'
  2. Make Note of (Copy) the Application (client) ID as it will be used later in the Riva Insight configuration.