​
Microsoft Account

​
Add a new application for Zylon

The objective is to obtain 3 values that will be used to configure Zylon to be able log in with a Microsoft Account.
  • Application (client) ID
  • Client Secret
  1. First of all you need to login into https://portal.azure.com/#home console dashboard
  2. Click Microsoft Entra Id
image.png
  1. Register a new App. Click on App registrations on the left menu.
image.png
  1. Click on New Registration.
image.png
  1. A new window will open and you will need to add the following information
  • ⚠️ Redirect URI type is web⚠️
  • Domain: https://zylon.company.com/api/v1/auth/microsoft/callback. Replace zylon.company.com with the domain where Zylon is hosted (It is the same domain as in the config file located in /etc/zylon/zylon-conf.yaml).
  • Supported account types: All account types are supported. Choose based on your specific needs.
image.png
  • In case you want to change it later you can do so in the Application Overview
image.png
  1. Save the following value that will be used later in the config file for Zylon.
  • Application (client) ID
image.png
  1. Now we need to generate the ClientSecret. Go to the left menu and click Manage > Certificates & secrets
image.png
  1. Click on New client secret and add the required information
image.png
  1. Copy the Value for client secret.
image.png
  1. Verify that the User.read permission is granted. Click on API Permissions on the left menu. You should see it there by default. In case it is missing, grant it.
image.png
  1. Add the following configuration to /etc/zylon/zylon-conf.yaml
auth:
  microsoft:
    enabled: true
    redirectUri: "https://zylon.company.com/api/v1/auth/microsoft/callback"
    tenantId: "common"
    clientId: "8c7d......"
    clientSecret: ".RS8Q~....."
Run the following command to refresh the configuration 
sudo zylon-cli update
Now you should see the Microsoft Account SSO
In case you don’t see the Microsoft Account button to log in, clear the browser cache.

​
How to manage users

To limit the number of users that are able to log into Zylon check the following link, by default everybody in the Directory can access Zylon and will be granted the member role https://learn.microsoft.com/en-us/entra/identity/enterprise-apps/what-is-access-management

​
Google

Under construction!