Riva Insight On-Premises Prerequisites - Microsoft Entra Id App Registration

Start a new App Registration

1. Click into the search at the top
2. Type in 'App registration'
3. Select 'App registrations' from the list of results

1. From the App registrations page, click on 'New registration'

Basic Information

1. Fill out the Information for the new Entra Id App Registration so that it is clear that it is for use with Riva Insight
2. Under 'Supported account types', select 'Single tenant only'
3. Under 'Redirect URI', select 'Single-page Application (SPA)'
4. Add the Redirect URI in format brk-multihub://{insightFQDN}:{port}
   For example: brk-multihub://riva.myorg.local:5001 
   • Note:
     • The callback URLs must be all in lowercase
     • dnsname is fully qualified domain name (fqdn)
     • 5001 is the default port for Insight (can be changed during the Insight setup)
     • No characters or values should be added after dnsname or port
     • exclude the port if using 443 as the Insight port
   • If behind a load balancer:
     • ensure the front-end Insight url is added (exclude the port if using 443)
     • add the local urls to aid with validation/troubleshooting
5. Click on 'Register' when complete

Add Microsoft Graph API Permissions

1. In the App registration, search for 'API'
2. Select 'API Permissions' 
3. Select 'Add a Permission'

4. On the 'Select an API' page, under the 'Microsoft APIs' tab select 'Microsoft Graph'

5. On the 'Microsoft Graph' page, select 'Delegated permissions'

6. Under 'Select Permissions', search for and select the following permissions:
   • OpenId Permissions
     1. email
     2. offline_access
     3. openid
     4. profile
   • User
     1. User.Read
     2. User.ReadBasic.All
   • Calendars
     1. Calendars.ReadWrite.Shared
   • Mail
     1. Mail.ReadWrite.Shared
7. Once done selecting the permissions, click on 'Add permissions'

8. The page will display the configured permissions

Provide Admin Consent

1. On the same page, click on 'Grant admin consent for ...'
   • If you navigated away you can get back to the page by searching for and clicking on 'API Permissions'

1. A prompt will appear asking for confirmation to grant admin consent
2. Click on 'Yes'

3. A status message will be displayed confirming consent has been granted

Access Application (client) ID

1. For the App Registration, click on 'Overview'
2. Make Note of (Copy) the Application (client) ID as it will be used later in the Riva Insight configuration.