Setup

commonfate/azure-ad@v1

Example granted_deployment.yml

version: 2
deployment:
  stackName: example
  account: "12345678912"
  region: ap-southeast-2
  release: v0.12.0
  parameters:
    CognitoDomainPrefix: example
    AdministratorGroupID: granted_administrators
    ProviderConfiguration:
      azure-ad:
        uses: commonfate/azure-ad@v1
        with:
          clientId: ""
          clientSecret: "*****"
          tenantId: ""

Create a new app in Azure

Configuration Fields

This step will guide you through collecting the values for these fields required to setup your provider.

Field	Description
tenantId	the azure tenant ID
clientId	the azure client ID

In the Azure portal, search or select App Registrations from the list of resources on Azure and then select the New registration to make a new App.

Name the app 'Common Fate Azure AD Groups Provider', Accounts in this organizational directory only (single tenant) for Supported account types and then click Register.

Your app will be shown in a table of other owned applications in azure. Click on the newly created app and we will now configure some scopes and create an access token.

Next, click on API permissions in the tabs on the left hand side. Click on Add a permission

Use Application permissions from Microsoft Graph

Search for User and add: User.ReadWrite.All

Then search for Group and add: Group.ReadWrite.All

Finally search for GroupMember and add: GroupMember.ReadWrite.All

Once you have selected the permissions click Add permissions to add them to your application.

Make sure you click Grant admin consent above the permissions table and permit the scopes on the application.

Navigate to the Overview tab in the Azure portal, and get the first two IDs from the Essentials section.

Create a new client secret

Configuration Fields

This step will guide you through collecting the values for these fields required to setup your provider.

Field	Description
clientSecret	the azure API token

Navigate to the Certificates & secrets tab in the left hand Nav of the Azure portal.

Under Client secrets, click Create a new secret.

Give the secret a descriptive name, like Common-Fate-Token. It will create a secret and display a table showing the secret value.

Copy the secret value and use it for the clientSecret input.