Azure Active Directory (Azure AD) has been renamed Microsoft Entra ID (ME-ID). While the WorkflowGen documentation has been updated to reflect this name change, the WorkflowGen application settings still refer to Azure AD (for example, Azure AD SCIM v2 directory connector).
Likewise, certain ME-ID configuration items in the Azure portal have been renamed and/or moved. The WorkflowGen documentation has been updated accordingly, but still might not be completely accurate in this regard. See the documentation for more information.
This section provides instructions on how to configure Microsoft Entra ID (ME-ID) with a single-page application (SPA) so that users can authenticate through it and make requests to the WorkflowGen GraphQL API. This configuration is done in three steps: registering your SPA, granting access to the API, and setting some redirect URLs.
Make sure to have a licensed copy of WorkflowGen installed and running on an IIS web server in HTTPS secure connection mode.
Make sure to have administrative access to ME-ID to be able to configure it properly.
Make sure to have provisioned an existing ME-ID user with which you can authenticate to WorkflowGen so that you can use the application afterwards.
Make sure to have successfully configured delegated authentication to ME-ID on your WorkflowGen instance following the instructions in the section with the WorkflowGen GraphQL API application registered as well.
In the Azure portal, click App registrations in the Azure services section.
Click New registration, and fill in the properties:
Name: My SPA name
You've now successfully registered your application in ME-ID.
Click Authentication.
Go to the Implicit grant and hybrid flows section.
Check the Access tokens and ID tokens checkboxes.
Click Save.
Now that you've successfully registered your SPA, you need to grant it access to the WorkflowGen GraphQL API application, which should be already registered if you've met the prerequisites.
Click API permissions.
In the Configured permissions section, click Add a permission.
Click My APIs, then select the WorkflowGen GraphQL API application in the list.
Accounts in this organizational directory only (Default Directory only - Single tenant)
✏️ Note: Depending on the context, you should choose the right option for your use case for the supported account type.Redirect URI:
Platform: Web
Value: https://<my spa login url>
Click Register at the bottom of the page.
default under the Permission column.Click Add permissions.
On the API permissions page, click Grant admin consent for <your tenant name>, then click Yes.
You should now see WorkflowGen GraphQL API in the list of your registered SPA's API permissions. Therefore, when requesting an access token to Azure, based on the audience, you should be able to obtain a correct token that you will send to your WorkflowGen instance's GraphQL API in addition to the request.