.. _azureportal_ad:

Insall app in Microsoft Azure portal for Active Directory
=========================================================

*  Register app in Azure portal
    1. Open Microsoft Azure Portal
    2. Go to Microsoft Entra ID -> App registration
    3. Click New registration
        * Name: aizen-ai-app
        * Supported account types: Single tenant
        * Click Add Redirect URI and select Single-page Application
            * Enter https://YOURDOMAIN/YOURNAMESPACE/gui
        * Click Register or Save (as we are using the same app- aizen-ai-app)

.. note::

   if exposing Aizen gui via ngrok then add additional Redirect URI, as an example shown here
       https://interprofessional-unmusically-zion.ngrok-free.dev/ahw/gui

.. only:: internal
    
   * Expose API and API permission step is not required

   * Expose an API
    1. Click on Add a scope
        * Scope name: access_as_user
        * Who can consent (Admin and users)
        * State: Enabled
        * Click Save

   * API permission
    1. Click add a permission
        - aizen-ai-app (access_as_user)
    2. Grant admin consent (Should be done by an administrator)

* Capture the information for the app as it is required for Authentication
        * Application (client) ID
        * Directory (tenant) ID