Connecting EaInfoport to Azure EntraID

• First, you need to register the EaInfoport application in Azure. This is done in the "App registration" service.

• by clicking "New registration"
• In the registration process, you only need to fill in the "Name" (for example "Infoport") and complete the registration with the "Register" button.

• Basic information about the registered application is displayed as a confirmation.
• The most important information here is the "Application (client) ID". We will enter this information in the Infoport configuration manager under "Client ID" (see later).
  

• If we now go back to the list of registered applications we will see "Infoport" among them (sometimes we need to use the "Refresh" button).
• 
  You can also see the "Application (client) ID" as the primary identifier of the application, which unlike Name cannot be changed after registration.

• Nyní budeme pokračovat v konfiguraci zaregistrované aplikace Infoport tím, že se proklikneme (skrz jméno Infoport) do detailu.
• Zde v menu vybereme „Manage“ a následně „Authentication“.

• The first thing to do is to add the Infoport application platform using the "Add aplatform" button by selecting "Web" from the menu.

• Azure then asks you to fill in information about two URLs.
• The first of these "Redirect URIs" is the url of the Infoport application where the user will be redirected after logging in with the EntraID.
• Fill in the URI consisting of the server address (where we have Infoport running - in the example it is "http://localhost") and the fixed path "/signin-oidc".
• The second is the "Front-channel logout URL" and is the url of the Infoport application that will be called after the user logs out using single sign-out.
• Fill in the url here consisting of the server address (note: https must be used here) and the fixed path "/Account/Logout".
• It is very important to check the option "ID tokens (used for implicit and hybrid flows)", which selects what type of token will be sent to Infoport after successful authentication in EntraID.
• Confirm the configuration with the "Configure" button.

• The following is the "Certificates & secrets" setting.

• Use the "New client secrets" button to add a new "client secret" with the desired expiration date.

Note: the value is available for copying (in the Value column) only immediately after the Client Secret is created. If it is not copied immediately, a new Client secret must be created. This will be entered in the Infoport configuration manager under "Client Secret" (see later).