🔵Integrations

Available Integrations

1. Entra ID

2. Azure Groups

3. Sharepoint

Entra ID Integration

This guide provides a step-by-step walkthrough for integrating Microsoft Azure Active Directory (AD) as an identity provider with Blockbrain Auth, streamlining the registration and login experience.

1. Azure AD Configuration

You need to have access to an Azure AD Tenant. If you do not yet have one follow this guide from Microsoft to create one for free.

2. Register a new client

1. Browse to the App registration menus create dialog to create a new app.

2. Give the application a name and choose who should be able to login (Single-Tenant, Multi-Tenant, Personal Accounts, etc.) This setting will also have an impact on how to configure the provider later on in Blockbrain Auth.

3. Choose "Web" in the redirect uri field and add the URL: https://auth.theblockbrain.ai/ui/login/login/externalidp/callback

4. Save the Application (client) ID and the Directory (tenant) ID from the detail page.

3. Add client secret

Generate a new client secret to authenticate your user.

1. Click on client credentials on the detail page of the application or use the menu "Certificates & secrets"

2. Click on "+ New client secret" and enter a description and an expiry date, add the secret afterwards

3. Copy the value of the secret and store it in a safe place (Password Manager) for future usage. You will not be able to see the value again in Azure in the future.

If you lose your secret or if the secret is expired, you need to create a new secret again.

4. Token configuration

To allow Blockbrain Auth to get the information from the authenticating user you have to configure what kind of optional claims should be returned in the token.

1. Click on Token configuration in the side menu

2. Click on "+ Add optional claim"

3. Add email, family_name, given_name and preferred_username to the ID token

5. API permissions

To be able to get all the information that Blockbrain Auth needs, you have to configure the correct permissions.

1. Go to "API permissions" in the side menu

2. Make sure the permissions include "Microsoft Graph": email, profile and User.Read

6. Other permissions granted

OpenID authorization is essential for enabling the OpenID Connect protocol. This protocol is particularly important for managing user logins and issuing ID tokens in applications.

In the context of app registration, 'other permissions' refer to the specific access rights or 'scopes' required by an application. These Scopes determine what data and features the application can access on behalf of the user.

1. User Consent: On the user's first login, they will be prompted to grant these permissions. This step is crucial for ensuring user agreement and security compliance. Depending on your Organization setup, admin consent might be needed.

2. After the consent was fulfilled, the permissions will be active and listed in the App Registration - Authentication and signin is now possible, the application has the necessary access rights.

   • The "Other permissions granted" should include "Microsoft Graph: openid"

   

   

Azure Groups Integration

This guide provides a step-by-step walkthrough for setting up Azure Groups Integration within the Blockbrain Knowledge Bot Platform.

1. Create a New Sites Admin App

Go to the Overview page and obtain the Client ID (Application (client) ID) and Tenant ID (Directory (tenant) ID). Save this information in a text file.

2. Grant Graph API Permission

In the Sites Admin App Registration, grant Graph API permissions for Group.Read.All, GroupMember.Read.All and User.Read.All

3. Create Client Secret Key

Navigate to the Certificates & Secrets page to create client secrets.

Copy the secret key value to the text file containing the Client ID and Tenant ID, Client Secret. Your text file should include:

Client Id: 4dbceba4-*******-960918801231
Client Secret: JPz******************
Directory (tenant) ID: cef6ac5c-7bc6-*****-fdf0

4. Final Step

Provide the Client ID, Client Secret Key, Tenant ID of the Target Application, and a list of selected sites to connect to the Knowledge Bots platform.

Connect Sharepoint

1. Register Sites Admin App

Before you begin the integration, you need to register an application in the Azure Active Directory portal.

1.1 Create a New Sites Admin Application

• Go to the Azure Portal.

• Navigate to Azure Active Directory > App registrations > New registration.

After creating the application, access the Overview page to get the Client ID (Application ID) and Tenant ID (Directory ID). Copy these values and save them in a text file.

1.2 Grant Graph API Permissions

• In the Azure portal, go to API Permissions > Add a permission.

• Select Microsoft Graph > Application permissions.

• Grant the following permissions:

  • Application.Read.All

  • Sites.FullControl.All

After adding the permissions, click Grant admin consent to approve the permissions.

1.3 Create a Client Secret

• Go to Certificates & secrets > New client secret.

• Create a new client secret and copy the secret key to your text file along with the Client ID and Tenant ID.

• Your text file should contain:

  • Client ID: 4dbceba4-*******-960918801231

  • Client Secret: JPz******************

  • Tenant ID: cef6ac5c-7bc6-*****-fdf05232c2f4

2. Register the Target Application

2.1 Create Target Application

• Follow the same steps as above to register another application, which will serve as the target application for SharePoint integration.

• Ensure that this application also has Sites.Selected permissions.

• After registering, create a new client secret and save it in your text file with the following details:

  • Client ID: 1ad09322-6c74-*****-8d736a2d9e92

  • Client Secret: Npn******************

  • Tenant ID: cef6ac5c-7bc6-*****-fdf05232c2f4

3. Configuring SharePoint Integration in Blockbrain

Now that your applications are registered and configured, follow these steps to integrate SharePoint with Blockbrain

1. Access the Admin Panel:

   • In the Blockbrain workspace, click on the Admin button at the top right corner of the screen. This will open up the administrative configuration options.

2. Navigate to Integrations:

   • In the left sidebar, locate and click on Integrations. This section allows you to browse, install, and manage integrations for your workspace.

3. Initiate the SharePoint Integration:

   • In the integrations section, click on the Connect button next to SharePoint to begin setting up the integration.

   `

4. Enter Integration Configuration Details:

   • A pop-up window will appear for configuring the integration. You will need to fill in the following fields get from Step 1: Register Sites Admin App in the Azure Portal:

     • Client ID (Admin App): Enter the Client ID for your admin application.

     • Client Secret (Admin App): Enter the client secret for your admin application.

     • Tenant ID: Provide the Tenant ID for your setup.

5. Fetch Sites:

   • After entering the necessary details, click on Get Sites to fetch the available sites for integration. The system will display a list of SharePoint sites that you can connect to.

   
6. Select Sites:

   • From the list of available sites, select the ones you want to integrate with Blockbrain. Multiple sites can be selected by clicking on each option.

   
7. Proceed with the Integration Setup:

   • Once you have selected the desired sites, click Next to move forward with the integration process.

   
8. Complete the Configuration:

   • In the final configuration screen, fill in the Client ID and Client Secret for the Target Application in Step 2: Register the Target Application for Connecting SharePoint.

   • Review the selected sites under Connected Sites.

   • When everything looks correct, click Save to finalize the integration configuration.

By following these steps, you should be able to configure the SharePoint integration with Blockbrain successfully.If you have any questions or need further assistance, please consult the relevant resources:

• Register an Application in Azure AD