Register an Application with Azure

1. Go to the Microsoft Azure portal and select View under Manage Azure Active Directory.
​
​2. Select App Registrations and then select New Registration.
​
​3. Enter the following values in Register an Application.
​
​ a. Input name, recommended Encompass or Encompass - {{Your Company}}.
​
b. Input redirect URI field as https://{{YourEncompassSiteAddress}}.com/aspx1/OAuth.aspx and select Register.
​
​4. On the Overview tab, save the Application (client) ID for use later during the Encompass setup, then navigate to the Certificates and Secrets tab.

​
5. Click New Client Secret and create a new secret. Copy the client secret value (not secret ID) immediately after creation as it will only be displayed once, this secret will be used later during the Encompass setup.
​
6. Using Universal Search in Encompas, navigate to theOAuth Settings table.
​
​7. Click the green Add OAuth Setting button.
​
8. Select the service providers from the drop-down list as well as input App ID and App Secret from steps four and five.
​
9. Copy and paste these values for AzureAD/AzureB2C.
​
a. Request URL: https://graph.microsoft.com/v1.0/me
​
b. Authorization URL: https://login.microsoftonline.com/common/oauth2/authorize
​
c. Token URL: https://login.microsoftonline.com/common/oauth2/token
​
10. Setting Auto Verify Email to true will automatically link the login.
​
11. Once linked users will be able to use the Azure icon on the login page to gain access to Encompass.
​
12. If the user Oauth does not auto-link select the User Menu at the top right to navigate to My Profile.
​
​13. Click Connect next to the service on the My Profile page.
​
​14. Input the account login information to link with Encompass.

Auto Verify Email

- Leaving true will automatically link the login for any Encompass users whose Microsoft email matches the email on their Encompass user account

- All other users can manually link their Microsoft account to their Encompass login via the My Profile dashboard

Roles -> Active Directory Group

- This value can be configured to automatically set the Role on users in Encompass when they sign in by associating a Role in Encompass with a Group in Azure.

- When a user signs in through SSO that has a Group assigned in the Azure Portal with an exact matching name to this value in Encompass, their Users.Role value in Encompass user will be updated to the role with the matching Active Directory Group.

See Microsoft's Register a client application in Microsoft Entra IDP for the latest steps on setting up an app in the Azure Portal.