Skip to main content

Connect Microsoft Entra ID

note

SSO connectors are available on the enterprise plan and use OpenID Connect (OIDC).

This guide walks through registering Viostream as an application in Microsoft Entra ID and adding it to your workspace as an SSO provider. Once connected, the provider can be used to restrict access to your Channels.

note

Authorization for Channel SSO happens entirely in Microsoft Entra ID. Assign the users or groups who should have access to this app registration, and they'll be automatically authorized to view the Channel as soon as they can sign in — Viostream doesn't apply any further access controls on top of this.

Please note that Microsoft's admin portal changes from time to time — if any of the following steps don't match what you see, consult Microsoft's Entra ID documentation or contact Customer Success via the Live Chat for assistance.

Step 1: Register a new application​

  1. Sign in to the Microsoft Entra admin center.
  2. Navigate to Identity > Applications > App registrations.
  3. Click New registration.
  4. Give the application a name (e.g. Viostream).
  5. Under Redirect URI, select Web and enter https://id.app.viostream.com/oauth2/callback.
  6. Click Register.

Step 2: Add the required scopes​

  1. From your new App registration, go to API permissions.
  2. Confirm the openid, profile and email delegated permissions for Microsoft Graph are present (these are included by default for most registrations).
  3. If they're missing, click Add a permission > Microsoft Graph > Delegated permissions and add them, then click Grant admin consent.

Step 3: Generate a Client Secret​

  1. Go to Certificates & secrets.

  2. Click New client secret, add a description and expiry, then click Add.

  3. Copy the Value of the secret immediately — it won't be shown again. This is your Client Secret.

  4. From the Overview page, copy the Application (client) ID. This is your Client ID.

  5. Also from the Overview page, note the Directory (tenant) ID. Your Issuer URL will be:

    https://login.microsoftonline.com/{tenant-id}/v2.0

    Replace {tenant-id} with your Directory (tenant) ID.

Step 4: Add the provider in Viostream​

  1. Navigate to Connectors in the  Settings page.
  2. Click Connect on the Entra ID card under Single Sign-On.
  3. Enter your Issuer URL, Client ID, Client Secret and the Email Domain you wish to associate with this provider (e.g. viostream.com).
  4. Click Save.

Your Entra ID provider is now available to use with your Channels and other features as they become available.

Rotate your Client Secret​

Client secrets expire (you set the expiry when creating one in Step 3) and should be rotated before then, or immediately if you suspect a secret has been exposed.

  1. In the Microsoft Entra admin center, return to your app registration's Certificates & secrets page.
  2. Click New client secret, add a description and expiry, then click Add, and copy the new Value immediately.
  3. In Viostream, navigate to Connectors in the  Settings page, open the connected Entra ID card, and update the Client Secret field with the new value, then click Save.
  4. Once you've confirmed sign-in still works with the new secret, return to Certificates & secrets in Entra and delete the old one.
How a viewer signs in via Entra ID once the connector is set up

See also​