Admin login via Microsoft Entra

(Extension access is still based on the Qlik user base)
You can configure the Entra admin login under settings=>general=>Entra ID
For onPrem installations, make sure to have a valid server->url setting to get the correct redirect URI.

1. Create a new app registration with the provided redirect URI.

2. Copy the application and tenant id from the overview.

3. Add a all groups claim to the Token configuration.

4. Add the GroupMember.Read.All and User.Read API permissions, this will require admin consent.

5. Create a new client secret and copy the secret value. Make sure to refresh the secret setting before it expires.

This should allow you to login with you your microsoft account.

6. Restrict access
   • Option A: Define entra groups (by their group ID) in the config dialog
   • Option B: Open the enterprise application (which will be created with the app registration), enable the setting Assignment required and add allowed users/groups to the application