Setup Microsoft Identity Provider

This solution will only work if your Azure AD endpoints do not contain tenant IDs. If they do contain the tenant ID we recommend using OpenID Connect or SAML.

NB: Notice in the screenshot below the Directory (Tenant) parameter is not in the Endpoints on the right.

Step-1: Navigate to Identity Providers and choose Microsoft from the list.

Step-3: Copy the Redirect URI

Azure End: 

Step-4: Create an Azure Application Registration for the Jenkins Service (in App Registration). Reference Document link. Ensure the redirect URI copied in step-2 is added for the new application.

Step-5: Create a Client Secret for the newly registered application. Reference Document link


Servana Identity Service:

Step-6: 

1. Enter the Application Client ID of the new application created in Azure(Step-4).
   
2. Enter the Secret created in (Step-5), leave rest default, and click on save.
   

Once the above steps are completed successfully, a new button appears on the Jenkins login screen(screenshot below). 

Once done, you can set up mappers to sync groups from Azure and automatically manage User onboarding.