Fixed Support Center Header - Freshdesk Template
Deploy Entra ID Directory on Octopus Server - Secret Double Octopus
?

Deploy Entra ID Directory on Octopus Server

Modified on Sun, 2 Nov, 2025 at 12:37 PM

Recent Searches

No recent searches

    Popular Articles

      Articles
      View all
        Topics
        View all
          Tickets
          View all
            no results

            Sorry! nothing found for

            Microsoft Entra ID DIRECTORY Setup



            Preface

            This comprehensive guide provides step-by-step instructions for integrating Microsoft Entra ID (formerly Azure Active Directory) with your Secret Double Octopus (SDO) tenant. The integration enables secure directory synchronization and enterprise-grade authentication capabilities for your organization.

            Microsoft Entra ID serves as the foundation for identity and access management in modern enterprise environments. By connecting your Entra ID directory to SDO, you enable seamless user provisioning, centralized authentication, and enhanced security controls across your applications and services.

            The configuration process involves several key phases: setting up an application registration in Microsoft Entra ID, configuring the necessary API permissions, establishing directory synchronization, and finally connecting users to your authentication services. Each step has been carefully documented with screenshots and practical tips to ensure a smooth implementation.

            Important: This integration requires administrative privileges in both Microsoft Entra ID and your SDO tenant. Please ensure you have the necessary permissions before proceeding with the configuration.

            SDO Remote AD Agent - Install and Configure

            Secret Double Octopus Active Directory Integration

             Download PDF 

            Prerequisites

            • Administrator access to Microsoft Entra admin center
            • Appropriate permissions to create and manage app registrations
            • Ability to grant admin consent for API permissions
            • Access to SDO tenant with directory management permissions
            • Basic understanding of identity and access management concepts
            1

            Navigate to App Registrations

            Go to https://entra.microsoft.com and click on 'App registrations' from the navigation menu.

            ? Tip:  This is where you'll manage all your Entra ID application registrations and directory settings.
            Step 1: Navigate to App Registrations
            2

            Create or Select App Registration

            Click on an existing App or create a 'New registration' to proceed.

            ? Tip:  You can choose from existing applications or create a new one for your specific integration needs.
            Step 2: Create or Select App Registration
            3

            Copy Application (Client) ID

            Locate and copy the 'Application (client) ID' from the overview page.

            ? Tip:  Save this value securely as you'll need it for the directory configuration.
            Step 3: Copy Application (Client) ID
            4

            Copy Directory (Tenant) ID

            Locate and copy the 'Directory (tenant) ID' from the same overview page.

            ? Tip:  This tenant ID uniquely identifies your organization's directory and is required for authentication.
            Step 4: Copy Directory (Tenant) ID
            5

            Configure API Permissions

            Click 'API permissions' and add the required Microsoft Graph permissions: Directory.ReadWrite.All (Delegated), User.ReadWrite.All (Application), User.PasswordProfile.ReadWrite (Application), Group.ReadWrite.All (application), Group.ReadWrite.All (Delegate) and Directory.ReadWrite.All (Application).

            ? Tip:  These permissions allow your application to manage users and directory objects. Admin consent is required for these permissions.
            6

            Create Client Secret

            Navigate to 'Certificates & secrets' and create a new client secret. Copy the value immediately as it won't be shown again.

            ? Tip:  The client secret acts as the application's password. Store it securely as it won't be shown again after creation.
            Step 6: Create Client Secret
            7

            Grant Admin Consent

            In the API permissions section, click 'Grant admin consent' for your organization.

            ? Tip:  This step authorizes the application to use the requested permissions across your tenant.
            8

            Navigate to Directories

            Navigate to SDO client tenant and click on 'Directories'.

            ? Tip:  This will take you to the directories management section where you can configure your Entra ID integration.
            Step 8: Navigate to Directories
            9

            Create New Directory

            Click on 'CREATE DIRECTORY' to start the directory creation process.

            ? Tip:  This will open a form where you can configure the new directory settings.
            Step 9: Create New Directory
            10

            Select Directory Type

            Click on the drop down arrow to select the directory type.

            ? Tip:  Choose the appropriate directory type for your organization's needs.
            Step 10: Select Directory Type
            11

            Choose Entra ID

            Select 'Entra ID' (not the Entra ID LDAP option) from the available choices.

            ? Tip:  Entra ID provides the most comprehensive directory services for modern applications.
            Step 11: Choose Entra ID
            12

            Select Directory Sync

            Click on the 'Directory Sync' button to enable directory synchronization.

            ? Tip:  This will allow your application to sync users and groups from the source directory.
            Step 12: Select Directory Sync
            13

            Select Directory

            Click 'SELECT' to confirm your directory selection.

            ? Tip:  This action will bind your application to the selected directory for synchronization.
            Step 13: Select Directory
            14

            Configure Directory Name

            Click the 'Name' field and type a descriptive name for your directory.

            ? Tip:  Use a clear, descriptive name that will help identify this directory in your organization.
            Step 14: Configure Directory Name
            15

            Configure Directory Settings

            Paste the previously copied values from Notepad into the Tenant ID, Client ID, and Client Secret fields. Then click on 'Select Email Mapping'.

            ? Tip:  Ensure all values are correctly pasted before proceeding to the next step.
            Step 15: Configure Directory Settings
            16

            Select Email Mapping

            Select 'mail' as the email mapping option.

            ? Tip:  This will map user email addresses to the directory service.
            Step 16: Select Email Mapping
            17

            Test Directory Connection

            Click 'TEST CONNECTION' to verify the directory connection settings.

            ? Tip:  This step validates that your application can successfully connect to the directory.
            Step 17: Test Directory Connection
            18

            Create Directory

            If 'TEST CONNECTION' is successful, click 'CREATE' to finalize the directory setup.

            ? Tip:  This action will create the new directory in your tenant and begin the synchronization process.
            Step 18: Create Directory
            19

            Monitor Directory Sync

            Once the Directory icon goes green, click on the sync icon to monitor the synchronization process.

            ? Tip:  The sync process may take several minutes to complete depending on your organization's size.
            Step 19: Monitor Directory Sync
            20

            Publish Directory

            Click 'PUBLISH' to make the directory available to your application.

            ? Tip:  This action will publish the directory configuration to your application.
            Step 20: Publish Directory
            21

            Publish Directory

            Click 'PUBLISH' again to confirm the directory publication.

            ? Tip:  This second publication step ensures the directory is fully configured and available.
            Step 21: Publish Directory
            22

            Manage Users

            Click 'Manage Users' to access the user management interface.

            ? Tip:  This will allow you to view and manage users in your directory.
            Step 22: Manage Users
            23

            Expand Directory

            Expand your directory to view all available users and groups.

            ? Tip:  This will show you the complete directory structure and user hierarchy.
            Step 23: Expand Directory
            24

            Select Users

            Click 'users' to view the list of users in your directory.

            ? Tip:  This will display all users that have been synchronized to your directory.
            Step 24: Select Users
            25

            View User List

            A list of all users will be shown here, including their directory information.

            ? Tip:  This is where you can verify that all users have been successfully synchronized.
            Step 25: View User List
            26

            Access Services

            Click 'Services' to configure directory services for your application.

            ? Tip:  This will allow you to set up authentication and authorization services.
            Step 26: Access Services
            27

            Add Service

            Click 'ADD SERVICE' to create a new service configuration.

            ? Tip:  This will open a form to configure your service settings.
            Step 27: Add Service
            28

            Configure Active Directory

            Click 'ADD' next to 'Active Directory Authentication' to configure the authentication service.

            ? Tip:  This will set up the service to authenticate users against your directory.
            Step 28: Configure Active Directory
            29

            Configure Service Settings

            Enter desired names for 'Service Name' and 'Issuer'. Then click 'CREATE'.

            ? Tip:  These settings will define how your service identifies itself to users and applications.
            Step 29: Configure Service Settings
            30

            Access Directories

            Click 'Directories' to verify your directory configuration.

            ? Tip:  This will show you the list of directories in your tenant.
            Step 30: Access Directories
            31

            Select Directory

            Select your configured directory field from the list.

            ? Tip:  This will ensure your application is using the correct directory configuration.
            Step 31: Select Directory
            32

            Save Configuration

            Click 'SAVE' to save your directory configuration settings.

            ? Tip:  This action will persist your directory settings for future use.
            Step 32: Save Configuration
            33

            Access Users

            Click 'Users' to view the list of users in your directory.

            ? Tip:  This will show you the complete user list that has been synchronized.
            Step 33: Access Users
            34

            Add User

            Click 'ADD' to add a new user to the service configuration.

            ? Tip:  This will open a form to add a new user to your service.
            Step 34: Add User
            35

            Expand Directory

            Expand your directory to view the complete user hierarchy.

            ? Tip:  This will show you the full directory structure including all user groups.
            Step 35: Expand Directory
            36

            Select Users

            Click 'users' to view the list of users in your directory.

            ? Tip:  This will display all users that have been synchronized to your directory.
            Step 36: Select Users
            37

            Select Users to Add

            Select the users you want to add to this service configuration.

            ? Tip:  This will add the selected users to your service with their directory permissions.
            Step 37: Select Users to Add
            38

            Save Service Configuration

            Click 'SAVE' to save your service configuration with the selected users.

            ? Tip:  This action will persist your service settings and user assignments.
            Step 38: Save Service Configuration
            39

            Publish Service

            Click 'PUBLISH' to make the service configuration available to users.

            ? Tip:  This action will publish your service settings to the directory.
            Step 39: Publish Service
            40

            Finalize Setup

            Click 'PUBLISH' again to complete the final configuration steps.

            ? Tip:  This second publication ensures all settings are properly configured and available.
            Step 40: Finalize Setup

            ✅ Setup Complete!

            Your Microsoft Entra ID directory is now configured and ready to use. All users have been synchronized and assigned to the authentication service.

            Attachments

            ?️ Print

            Articles in this folder -

            You may like to read -

            Footer - Secret Double Octopus