Elgato_dark/ToolJet
1
0
Fork 0
mirror of https://github.com/ToolJet/ToolJet synced 2026-04-21 13:37:28 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions 5

[docs]: Add documentation for group sync using Microsoft Entra ID usign OIDC

Browse source
This commit is contained in:
Aditya Joshi 2025-12-18 18:04:30 +05:30
parent 91f56fab5d
commit d2d76cab19
5 changed files with 24 additions and 1 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

BIN
docs/static/img/user-management/sso/oidc/microsoft-entra-id/group-sync/group-id.png vendored Normal file
View file

Binary file not shown.
Side by side

After

Width:  |  Height:  |  Size: 251 KiB

BIN
docs/static/img/user-management/sso/oidc/microsoft-entra-id/group-sync/group-sync-configuration.png vendored Normal file
View file

Binary file not shown.
Side by side

After

Width:  |  Height:  |  Size: 327 KiB

BIN
docs/static/img/user-management/sso/oidc/microsoft-entra-id/group-sync/groups-claim.png vendored Normal file
View file

Binary file not shown.
Side by side

After

Width:  |  Height:  |  Size: 363 KiB

BIN
docs/static/img/user-management/sso/oidc/microsoft-entra-id/group-sync/token-configuration.png vendored Normal file
View file

Binary file not shown.
Side by side

After

Width:  |  Height:  |  Size: 528 KiB

25
docs/versioned_docs/version-3.16.0-LTS/user-management/sso/oidc/azuread.md
View file

@ -41,7 +41,7 @@ Microsoft Entra ID can be configured as the Identity Provider for OIDC, which is
1. Go to **ToolJet > Workspace Settings > Workspace login > Enable OpenID Connect > Add provider**.
<img className="screenshot-full" src="/img/user-management/sso/oidc/microsoft-entra-id/enable-oidc.png" alt="Microsoft Entra ID" />
2. Without entering any details, click on **Save changes** and copy the **Redirect URL**.
2. Without entering any details, click **Save changes** to generate and copy the **Redirect URL**.
3. Go to [Microsoft Azure Portal](https://portal.azure.com) and navigate to [Manage Microsoft Entra ID](https://portal.azure.com/#view/Microsoft_AAD_IAM/ActiveDirectoryMenuBlade/~/Overview).
@ -64,3 +64,26 @@ Microsoft Entra ID can be configured as the Identity Provider for OIDC, which is
The users shall now be able to Sign In using Microsoft Entra ID.
## Configuring Group Sync using Microsoft Entra ID
1. Go to Azure Portal > [Enterprise Applications](https://portal.azure.com/#view/Microsoft_AAD_IAM/StartboardApplicationsMenuBlade/~/AppAppsPreview) > Your application.
2. In the left panel, go to Manage > Single sign-on > Attributes & Claims > Edit > Add a group claim > Click on Go to Token configuration.
<img className="screenshot-full" src="/img/user-management/sso/oidc/microsoft-entra-id/group-sync/token-configuration.png" alt="Token Configuration" />
3. Click on Add groups claim > All groups (You can choose the group type according to your need) and click Add. A claim named **groups** will be created.
<img className="screenshot-full" src="/img/user-management/sso/oidc/microsoft-entra-id/group-sync/groups-claim.png" alt="Groups Claim" />
4. Go to Azure Portal > Groups > All groups. Select the group you want to create a mapping for and copy the Object ID.
<img className="screenshot-full" src="/img/user-management/sso/oidc/microsoft-entra-id/group-sync/group-id.png" alt="Groups Object ID" />
5. Go to **ToolJet > Workspace Settings > Workspace login > OpenID Connect > Your Microsoft Entra ID OIDC Configuration > Enable Group Sync**.
6. Enter the **Claim Name** as `groups`. If the name you got in Step 3 was different, enter that.
7. The **Group mapping** will be as follows:
```js
Object ID from Step 4 -> ToolJet group name
```
<img className="screenshot- border-none" src="/img/user-management/sso/oidc/microsoft-entra-id/group-sync/group-sync-configuration.png" alt="Group Sync COnfiguration" />