Step 1: Registering a new App via your Business Azure account

This first step is necessary to complete prior to making any changes to your Nimbus account.  During this process you will register a new App via your Azure account and once complete, you will be able to use key pieces of information to setup the Microsoft SSO within your Nimbus account.

See the following instructions as a guide for registering a new app, noting that your Azure account may be configured differently. For additional information, see the registering an application with the Microsoft identity platform instructions from Microsoft.

1. Login to the Azure Portal with an Azure Administrator account - Home - Microsoft Azure

   Open

   

2. Once logged in, navigate to App registrations.

   Open

   

3. Click the New registration icon located on the top middle of the page.

   Open

   

4. Give the App a name eg: your Business Name.

5. Click Branding & properties and setup the detail for your business.

   Open

   

6. Note down the ApplicationID (ClientID) as you will need this information to configure the MS SSO in your Nimbus account.

   Open

   

7. Click Authentication and enter the following into the Web – Redirect URIs field:
   https://xoa2.nimbushost.net/openid/microsoft.process

   Open

   

8. Be sure to select the Tokens allowed to be issued by authorization endpoints as highlighted above.

9. Once completed, select Certificates & secrets:

   1. Click the New client secret button.

   2. Enter a description eg: Nimbus SSO.

   3. Set the expiry timeframe.  It is recommended that the expiration for the secret is set to 24 months, though ensure the secret is updated prior to the expiry date. 

      Open

      

   4. Click the Create button and the secret will be generated.

   5. The screen will return to display the newly created secret.  Copy the Value to your clipboard and hold until it is required to add to your Nimbus account.  Note that there is a one-time opportunity to copy this data, otherwise, it will become unreadable.

      Open

      

10. The last step in registering the new App, is to copy PART of the OAuth 2.0 authorisation endpoint (v2) as you will need this information to configure the MS SSO in your Nimbus account. 

    1. Via the App registrations page, select the Endpoints option on the top of the page. 

       Open

       

    2. Copy the URL ensuring you copy everything from https:// all the way through to /v2.0 as shown below. 

       a.       Do NOT copy the /authorize at the end of the URL

       b.       Remove the oauth2/

       For example this URL would be:

       https://login.microsoftonline.com/2j82-h99s-72h2-kg28-gj99a09900-fas9fs9-09/v2.0

       Open