Azure AD Open ID Connect

To configure Azure AD OIDC with ALM:

Create a New App Registration

  1. Navigate to portal.azure.com and then Azure Active Directory.

    azureadstep1

  2. In the left-hand navigation panel, select App registrations.

    azureadstep2

  3. On the top of the App registration page, click +New registration.

    azureadstep3

  4. On the Register an application page, provide:

    1. Name- the name you would like for ALM. (Example: ALM On-Prem)
    2. Supported account types- choose single tenant (default).
    3. Redirect URI- set the drop-down to Web and provide the sign-in URL for your ALM instance.

  5. Click register. You will be taken to the newly created App registration page.

    azureadstep4

  6. On the registration page, take note of the Application (client) ID value. This will be used for the OIDC Client ID value during ALM setup.

    azureadstep5

Configure OIDC URLs

  1. On the top of the registration page, click Endpoints. The endpoints dialogue will open.

    azureadstep6

  2. Copy the OpenID Connect metadata document value, but omit the v2.0/well-known/openid-configuration portion of the URL. This will be the OIDC Authority URL.

    azureadstep7

  3. Close the Endpoints dialogue.

  4. On the left-hand navigation menu, click Authentication. The Platform configurations panel will open.

    azureadstep8

  5. Under Web, click Add URI.

    azureadstep9

  6. Enter https://YOUR_ALM_DOMAIN/signout-callback-oidc.

    azureadstep10

  7. On the top of the panel, click Save.

Create Client Secret

  1. In the left-hand navigation menu, click Certificates & secrets. The Certificates & secrets panel will open.

    azureadstep11

  2. Under Client secrets, click New client secret.

    azureadstep12

  3. On the Add a client secret dialog, choose:

    1. A description. (Example: ALM OIDC Credentials)
    2. An expiration date. When this secret expires, ALM will need to be reconfigured with manually with a new secret.

  4. Click Add to save the new client secret.

    azureadstep13

  5. The new secret will now be displayed in the Client secrets section of the Certificates & secrets page.

  6. Click the Copy to clipboard icon and store the secret value. It will be used as the OIDC Client Secret during ALM setup.

    azureadstep14

  7. The OpenID connect configuration for Azure AD is now ready for use with ALM.