As part of the Cloud Maker Enterprise Server (CMES) install using the Azure Marketplace solution offer, an Azure Active Directory App Registration is required.
The app registration is required to allow Azure Active Directory-based user authentication to the CMES appliance.
To set up the Azure App Registration for the CMES install, do the following:
Open Entra ID (formerly Azure AD).
Navigate to App Registrations on the left panel.
Select +New registration.
Enter a Name for your App Registration.
Select Accounts in this organizational directory only (Tenant Name - Single tenant).
On the Redirect URI (optional) section, select Web from the Select a platform drop-down.
On the Redirect URI input, enter the FQDN you wish to use for your CMES appliance:
For a custom domain it would be https://cmes.yourdomain.com/oauth2/callback
For a default FQDN, it would be https://<public-ip-dns-label>.<region>.cloudapp.azure.com/oauth2/callback
For a US Gov default FQDN, it would be: https://<public-ip-dns-label>.<region>.cloudapp.usgovcloudapi.net/oauth2/callback
Click Register to create the App Registration
Note down the Application (client) ID and Directory (tenant) ID for use in the CMES install process.
Select Certificates and Secrets from the left menu.
Click New client secret
Enter a Description and choose an expiry date for the secret
Click Add to generate the secret
Note down the secret Value for use in the CMES install process
Next, select Manifest from the left menu and set the following settings:
Change accessTokenAcceptedVersion from
null
to2
and save