Azure Web App Authentication Active Directory

To register an Azure AD application for authentication, start by logging into the Azure portal for your organization. Navigate to the Azure Active Directory page, select the appropriate directory, and proceed to register a new application.

Steps to Register a New Application

1. Under Manage, select App registrations.
2. Click + New Registration to initiate the application creation process.
3. Fill in the required fields for Name and Supported account types as outlined in the table below:

4. Configure the Redirect URI. The following table provides the appropriate Redirect URI values for both single-tenant and multi-tenant deployments. For most enterprise scenarios, the single-tenant Redirect URI is recommended. Replace YOUR_AUTH0_URI with the relevant Auth0 URI for your region and plan.

5. Save the App registration to continue setting up Azure AD SSO.

Registering an Azure AD App

1. Sign into your Azure portal and select Azure Active Directory from the Azure services menu.
2. Click on App registrations in the left panel.
3. Choose New registration to open the form for creating a new Active Directory app.
4. Enter a name for your app; we suggest using “dbt Labs Azure DevOps App”.
5. Select Accounts in any organizational directory (Any Azure AD directory – Multitenant) as the Supported Account Types. This is crucial as Azure DevOps and Azure Active Directory are treated as separate tenants, and selecting Multitenant ensures proper functionality.
6. Add a redirect URI by selecting Web and entering https://YOUR_ACCESS_URL/complete/azure_active_directory, replacing YOUR_ACCESS_URL with the appropriate Access URL for your region and plan.
7. Click Register to finalize the process.

!Navigating to the Azure AD app registrations

Your app should resemble the following before registration:

!Registering an Active Directory app

Updating Azure Active Directory

Azure Active Directory admins may need to make slight adjustments to the existing authentication app in the Azure AD portal. This migration can be done without deleting or recreating the entire app; simply edit the existing app. Begin by opening the Azure portal and navigating to the Active Directory overview.

Steps to Update the App

1. Click App Registrations on the left side menu.
2. Select the appropriate dbt Cloud app from the list. From the app overview, click on the hyperlink next to Redirect URI.
3. In the Web pane under Redirect URIs, click Add URI and enter the appropriate https:///login/callback. Save the settings and ensure it is reflected in the updated app overview.

!Select App Registrations

!Click the Redirect URI hyperlink

!Enter new redirect URI