Connection Settings

Provide the information required to connect to the Microsoft Entra instance based on the selected Grant Type for OAuth 2.0 authentication:

  1. In Client ID and Client Secret, enter the Microsoft Entra API details for OAuth2 authentication.

  2. In Domain Name, enter the name of the Microsoft Entra domain to be managed. For example, contoso.onmicrosoft.com.

    Important
    If you are using SailPoint CIEM, you must add the Entra domain under Client Credentials in the Domain Name field. It must end in .onmicrosoft.com or .onmicrosoft.us. Custom domain names are not supported.

  3. (Optional) Select the Use Continuous Access Evaluation checkbox to enable the connector to leverage the Microsoft Entra real-time enforcement of Conditional Access location and risk policies along with instant enforcement of token revocation events for an enterprise application (service principal).

  4. Select Save.

  1. In Client ID and Client Secret, enter the Microsoft Entra API details for OAuth2 authentication.

  2. Enter the valid Refresh Token.

  3. Enter the Domain Name of the Microsoft Entra domain to be managed. For example, contoso.onmicrosoft.com.

  4. (Optional) Select the Use Continuous Access Evaluation checkbox to enable the connector to leverage the Microsoft Entra real-time enforcement of Conditional Access location and risk policies along with instant enforcement of token revocation events for an enterprise application (service principal).

  5. Select Save.

  1. In the Client ID field, enter the Microsoft Entra API Client ID for OAuth2 authentication.

  2. In the Certificate field, provide the unique alpha-numeric value of certificate used to sign the JWT assertion.

  3. Enter the Private Key text used for encrypting the JWT assertion.

  4. Enter the Private Key Password that is used for decrypting the private key.

  5. In the Domain Name field, enter the name of the Microsoft Entra domain to be managed. For example, contoso.onmicrosoft.com.

  6. (Optional) Select the Use Continuous Access Evaluation checkbox to enable the connector to leverage the Microsoft Entra real-time enforcement of Conditional Access location and risk policies along with instant enforcement of token revocation events for an enterprise application (service principal).

  7. Select Save.