Authentication — Microsoft (Entra ID)

Let users sign in to Forra via a Microsoft account from your organization.

Prerequisites

• Administrator access to your Entra ID (Azure AD) tenant.
• Your organization's Forra domain (e.g., scout.mirego.com or myclient.scout.mirego.com).

1. Create the App registration in Entra ID

In the Entra ID portal, create a new App registration:

• Name: Forra SSO
• Redirect URI:
• Platform: SPA
• URL: https://{your-scout-domain}/entra/login/callback

Once the application is created, take note of:

• Application (client) ID
• Directory (tenant) ID

2. Configure Forra

In Tenant Admin → External Services tab → Authentication Providers section, open the Microsoft card and enter:

• Base URL: https://login.microsoftonline.com/{Directory (tenant) ID}
• Client ID: {Application (client) ID}

Save.

3. Test and clean up

Sign out and test the connection via Microsoft. Once validated:

• If an Auth0 or Google configuration was used temporarily, remove its values from the same section so only Microsoft remains.

Notes

• The Redirect URI must use exactly the final domain of your Forra instance. If you migrate from one subdomain to another (e.g., from myclient.scout.mirego.com to scout.mirego.com), update the Redirect URI in Entra ID accordingly.
• No client secret is required: authentication uses the SPA flow with PKCE.