SSO: Microsoft Entra (OIDC)

Add an Microsoft Entra directory to CareLineLive using Open ID Connect

This article will walk you through the steps required to set up an SSO connection to your Microsoft Entra directory using OIDC.

Pre-requisites

  • CareLineLive account, with administrator access.

  • Microsoft Entra account with permissions to create new App Registrations within Entra.

Entra: Configure the App Registration

First, you'll need to set up the app registration within your Entra account.

  • Open the Entra portal and go to Applications → App Registrations

  • Give the registration an appropriate name, for example "CareLineLive (OIDC)"

    • You can use any name that you want, it won't affect how the connection is set up.

  • Choose the account types that you want to support.

    1. If you're not sure, select the "Single tenant" option.

Select supported account types

  • Leave the Redirect URI blank for now - we'll come back to this later.

  • Create the application

Next, open up the application page so we can create the credentials needed for the connection.

  • Open the Certificates & Secrets, then the Client Secrets tab.

  • Click New client secret and add an appropriate description.

  • Set the expiry date to an option that you are comfortable with.

    • When. the secret expires, you will have to generate a new secret and update the connection on CareLineLive.

  • Copy the secret value

    • This will be the Client Secret value when setting up the connection.

    • This is the only time you'll be able to see this, and we'll need it a little later when we're adding the connection to CareLineLive.

  • Go to the Overview tab for the app registration

    • Copy your Client ID from the Application (client) ID field

    • Copy your Tenant ID from the Directory (tenant) ID field

  • Open the Authentication tab of the app registration, and under the Implicit grant and hybrid flows section, enable ID tokens and click save.

CareLineLive: Setting up the connection

Now we're ready to set up the connection in CareLineLive.

  • Open Settings from the main navigation and expand Authentication, then SSO

  • Click + to create a new connection

  • Select Microsoft Entra (OIDC) as the identity provider

    • You can optionally change the name of the connection

  • In the Credentials section:

    • Add your Tenant ID

    • Add the Client ID and Client Secret that you copied from the Entra app registration.

  • Click Create

  • You'll be shown a list of Redirect URIs that you'll need to add to the app registration in the Entra portal.

    • You can get back to these later by clicking the actions button next to the connection from the SSO connections page and opening Redirect URIs

Entra: Add the Redirect URIs

Finally, we need to tell Entra to allow requests from CareLineLive.

  • Open the App Registration on Microsoft Entra, and open the Authentication tab.

  • Click Add a platform, then Web

  • Add each of the Redirect URIs from CareLineLive

    • CareLineLive will give you three redirect URIs to add: Web, Android, and iOS.1

And that's it! Now you can test logging in to CareLineLive using SSO. Log out of CareLineLive and head to the login page. Type in your email address and click Next, you should be presented with a button to log in using your newly configured SSO connection.