Enable Microsoft Entra ID authentication

This article describes how to enable Microsoft Entra ID (also known as Azure AD) authentication on Lucent Sky AVM.

In this article, you will learn how to:

• Enable Microsoft Entra ID authentication on CLEAR Engine.

At the end, you will be able to enable Microsoft Entra ID authentication on CLEAR Engine.

Prerequisites of Microsoft Entra ID authentication

The following prerequisites must be met to support Microsoft Entra ID authentication.

• The Lucent Sky AVM instance does not have Active Directory authentication enabled.
• The installed Lucent Sky AVM license supports Microsoft Entra ID authentication.

If the Lucent Sky AVM instance is part of a cluster, every node in the cluster must meet the prerequisites.

Register Lucent Sky AVM with Microsoft Entra ID

1. Navigate to the Microsoft Entra admin center.
2. Navigate to App registrations, then select New registration.
3. Name the application, and under Supported account types select Single tenant only.
4. Under Redirect URI, select Web platform, and enter the following URL: https://<web-ui-fqdn>/authentication/signincallback, where <web-ui-fqdn is the domain name of the Web UI.
5. Select Register.
6. Copy the Application (client) ID and the Directory (tenant) ID of the app registration.
7. If the CLEAR Engine instance is part of a cluster, navigate to Authentication and create a redirect URI for each of the instances.

Enable Microsoft Entra ID authentication on CLEAR Engine

1. Open PowerShell as administrator.

2. Enter the following command to open the CLEAR Engine configuration file with the default text editor:

    "C:\Program Files\Lucent Sky\CLEAR Engine\SkyAnalyzer.Engine.exe.config" | Invoke-Item
   

3. In the configuration\connectionStrings section, add the following connection string:

    <add name="AzureAD" connectionString="TenantId=[tenant-id];AppId=[application-id]" />
   

   where [tenant-id] and [application-id] are the values from the app registration.

4. In PowerShell, enter the following command to restart CLEAR Engine:

     Stop-Service "CLEAR Engine"; Start-Service "CLEAR Engine"
   

5. Repeat the steps above on every node in the cluster.

Create a Microsoft Entra ID user on Lucent Sky AVM

1. Navigate to the Microsoft Entra admin center.
2. Navigate to Users, then select the user to create.
3. Copy the Object ID of the user.
4. Navigate to the Lucent Sky AVM Web UI and sign in as an administrator.
5. Navigate to Settings > Users, then select Create a new user.
6. Enter the Object ID in Email, check Organizational Account, then select Create user.