# Connecting EaInfoport to Azure EntraID

- First, you need to register the EaInfoport application in Azure. This is done in the "App registration" service.

[![image-1740998580817.png](https://doc.eainfoport.cz/uploads/images/gallery/2025-03/scaled-1680-/image-1740998580817.png)](https://doc.eainfoport.cz/uploads/images/gallery/2025-03/image-1740998580817.png)

[![image-1740998736037.png](https://doc.eainfoport.cz/uploads/images/gallery/2025-03/scaled-1680-/image-1740998736037.png)](https://doc.eainfoport.cz/uploads/images/gallery/2025-03/image-1740998736037.png)

- by clicking "New registration"
- In the registration process, you only need to fill in the "Name" (for example "Infoport") and complete the registration with the "Register" button.

[![image-1740998852520.png](https://doc.eainfoport.cz/uploads/images/gallery/2025-03/scaled-1680-/image-1740998852520.png)](https://doc.eainfoport.cz/uploads/images/gallery/2025-03/image-1740998852520.png)

- Basic information about the registered application is displayed as a confirmation.
- The most important information here is the "Application (client) ID". We will enter this information in the Infoport configuration manager under "Client ID" (see later).

[![image-1740999007680.png](https://doc.eainfoport.cz/uploads/images/gallery/2025-03/scaled-1680-/image-1740999007680.png)](https://doc.eainfoport.cz/uploads/images/gallery/2025-03/image-1740999007680.png)

- If we now go back to the list of registered applications we will see "Infoport" among them (sometimes we need to use the "Refresh" button).
- You can also see the "Application (client) ID" as the primary identifier of the application, which unlike Name cannot be changed after registration.

[![image-1740999212412.png](https://doc.eainfoport.cz/uploads/images/gallery/2025-03/scaled-1680-/image-1740999212412.png)](https://doc.eainfoport.cz/uploads/images/gallery/2025-03/image-1740999212412.png)

- Nyní budeme pokračovat v konfiguraci zaregistrované aplikace Infoport tím, že se proklikneme (skrz jméno Infoport) do detailu.
- Zde v menu vybereme „Manage“ a následně „Authentication“.

[![image-1741008224488.png](https://doc.eainfoport.cz/uploads/images/gallery/2025-03/scaled-1680-/image-1741008224488.png)](https://doc.eainfoport.cz/uploads/images/gallery/2025-03/image-1741008224488.png)

- The first thing to do is to add the Infoport application platform using the "Add aplatform" button by selecting "Web" from the menu.

[![image-1741008348517.png](https://doc.eainfoport.cz/uploads/images/gallery/2025-03/scaled-1680-/image-1741008348517.png)](https://doc.eainfoport.cz/uploads/images/gallery/2025-03/image-1741008348517.png)

- Azure then asks you to fill in information about two URLs.
- The first of these "Redirect URIs" is the url of the Infoport application where the user will be redirected after logging in with the EntraID.
- Fill in the URI consisting of the server address (where we have Infoport running - in the example it is "http://localhost") and the fixed path "/signin-oidc".
- The second is the "Front-channel logout URL" and is the url of the Infoport application that will be called after the user logs out using single sign-out.
- Fill in the url here consisting of the server address (note: https must be used here) and the fixed path "/Account/Logout".
- It is very important to check the option "ID tokens (used for implicit and hybrid flows)", which selects what type of token will be sent to Infoport after successful authentication in EntraID.
- Confirm the configuration with the "Configure" button.

[![image-1741009288949.png](https://doc.eainfoport.cz/uploads/images/gallery/2025-03/scaled-1680-/image-1741009288949.png)](https://doc.eainfoport.cz/uploads/images/gallery/2025-03/image-1741009288949.png)

- The following is the "Certificates & secrets" setting.

[![image-1741009526009.png](https://doc.eainfoport.cz/uploads/images/gallery/2025-03/scaled-1680-/image-1741009526009.png)](https://doc.eainfoport.cz/uploads/images/gallery/2025-03/image-1741009526009.png)

- Use the "New client secrets" button to add a new "client secret" with the desired expiration date.

[![image-1741009620257.png](https://doc.eainfoport.cz/uploads/images/gallery/2025-03/scaled-1680-/image-1741009620257.png)](https://doc.eainfoport.cz/uploads/images/gallery/2025-03/image-1741009620257.png)

**Note:** the value is available for copying (in the Value column) only immediately after the Client Secret is created. If it is not copied immediately, a new Client secret must be created. This will be entered in the Infoport configuration manager under "Client Secret" (see later).