After you have configured IDP for Microsoft Entra and have the base64url-encoded
SHA-1 thumbprint ready, you must create a Microsoft Entra connection in the Control Room.
Procedure
Navigate to Manage > OAuth connections.
Click Create connection.
The Connection settings screen
appears.
Select a Provider type as Microsoft
Entra.
Note: The Callback URL is used in
your enterprise application configuration settings to connect to the Control Room.
Enter a unique Connection name to identify the
connection.
Select the Client authentication method as Client
Authentication Private Key JWT.
Enter the Client ID that is provided by the provider for
your account.
Enter the Authorization URL used to obtain an
authorization code for your account.
Enter the Token URL used to exchange an authorization
code for an access token.
Optional: Enter Scope.
This information is used as claims (information about the user) in an access
token and forwarded to the resource server to limit access.
Note: If you are adding more than one scope, ensure that you
separate the scopes using commas or space separated delimiter.
Click Next.
The Test connection and save credentials screen
appears.
Optional: Select the Save login credentials.
Optional: Click Save changes and test connection.
Click Next.
The Invite roles screen appears.
Select the roles that you want to invite to use this connection. Only invited
roles can use the token in a bot, whether it is private, shared, or
both.
The Invite Roles action is mandatory when a Bot uses the OAuth Connection. This step is not required when
used by an external connection.
Note: Only custom roles are displayed in the list of
Available roles.
Click Create connection. An OAuth
connection is created.