Entra / AAD Configuration

Looking for cloud SSO? This page describes the direct-to-instance setup, in which Entra talks to your Valsight instance. If your Valsight runs in the cloud, your identity provider connects through Valsight ID instead and there is one redirect URL rather than the per-edition callback URLs below — see Cloud SSO with Valsight ID.

Configure Microsoft Entra (formerly Azure AD) as Valsight’s identity provider: register the application, set the callback URL for your deployment edition, and pass group claims through.

Basic configuration

Create a new Application registration, and provide Valsight with the following information:

• Application (client) ID (= clientId)
• clientSecret
• Directory (tenant) ID (= appId)

Your Valsight Contact will provide you with the callback URLs relevant for your instance. You must add the callback URLs to your Entra Configuration. The structure of of callback URLs:

Corporate Edition

https://cloud.valsight.com/<tenant>/login/oauth2/code/openIdConnect
https://cloud.valsight.com/<tenant>-restore/login/oauth2/code/openIdConnect (restore endpoint)

Enterprise Edition Open Telekom Cloud

https://<tenant>.valsight.cloud/login/oauth2/code/openIdConnect
https://<tenant>-restore.valsight.cloud/login/oauth2/code/openIdConnect (restore endpoint)

Enterprise Edition Microsoft Azure

https://<tenant>.valsight.eu/login/oauth2/code/openIdConnect
https://<tenant>-restore.valsight.eu/login/oauth2/code/openIdConnect (restore endpoint)

Enterprise Edition AWS

https://<tenant>.valsight.app/login/oauth2/code/openIdConnect
https://<tenant>-restore.valsight.app/login/oauth2/code/openIdConnect (restore endpoint)

Group configuration

To transfer groups in the OIDC Token, add the Optional Claim to the Token Configuration as shown in the screenshot.

Logout URL

If desired, Valsight can redirect users to your logout URL after pressing the Logout Button in Valsight. Provide the URL to your contact in Valsight. By default, just the Valsight Session is logged out.