Skip to content

OAUTH2 configuration

Only supports Azure at the moment

Urban Strategy can use Azure AD authentication via OAUTH2 for access to the Web interfaces for a specific client domain. Below is the information needed to set this up.

  • An Azure app registration is needed to link urban Strategy to the client Azure AD environment.
  • The Azure app information has to be added to the Urban Strategy setup

Add app registration in Azure

Microsoft Azure - Microsoft Entra ID - manage - App registrations New registration Name: AUTH Urban Strategy Single tenant only Select a platform: Web Redirect URI: https://portal.urbanstrategy.nl/redirlogin

Add a secret:

urbanstrategy-portal-app-secret

Add redirect URIs:

https://portal.urbanstrategy.nl/redirlogin
https://beta.urbanstrategy.nl/redirlogin

settings:
    check: Access tokens
    check: ID tokens
    Front-channel logout URL: empty
    Allow public client flows: disable

API permissions:
    Microsoft Graph:
        openid: type Delegated
        User.Read: type Delegated

properties:
    Enabled for Users to sign-in: yes
    Homepage URL: https://www.scenexus.com
    Assignment required: no
    Visible to users: no

Urban Strategy setup changes:

Overrides file:

# https MUST be configured and active

export WEB_HTTPS_AS_DEFAULT=true
export ACL_CHECKS_ENABLED=true
export OAUTH_CONFIG=/var/urbanstrategy/<mode>/oauthconfig.json

oauthconfig.json

The client domain has to be added to oauthconfig.json in the root of the server setup. Add the Azure AD app registration information to the client domain object so the Urban Strategy authentication nows how to contact the client Azure AD to check user authentication.

At this moment only Azure AD as an OAUTH2 source is supported.

[
  {
    "domain": "<client-email-domain>",
    "type": "azureAD",
    "tenantId": "<tenentId>",
    "clientId": "<clientId>",
    "secret": "<app-registration-secret-value>",
    "organisation": "<client-organisation-name>"
  }
]