> ## Documentation Index
> Fetch the complete documentation index at: https://docs.oloid-demo.com/llms.txt
> Use this file to discover all available pages before exploring further.

# Integrating Oloid as an External Method Authentication (EAM) with Microsoft Entra ID

> This document provides step-by-step instructions to integrate Oloid as an EAM with Microsoft Entra ID IDP Profile for SAML in the Tenant Admin Portal.

## Introduction

This document describes how to configure **Oloid External Authentication Method (EAM)** in **Microsoft Entra ID**. The integration allows Oloid’s passwordless authentication to work with Microsoft Entra ID, enabling Oloid to act as an **external MFA provider** for secure and seamless access to enterprise applications.

## Key highlights of this document include

### Obtaining Essential Oloid Tenant Details

* Client ID.
* OpenID Configuration.
* Authorization Endpoints.

### Configuring Microsoft Entra ID

* [Register and configure the application.](#configure-the-application)
* Configure External Authentication Methods (EAM).
* Configure Conditional Access Policies (Optional).

### Testing the Integration

Verify the authentication flow by testing user access to integrated applications, such as ServiceNow. This configuration integrates Oloid’s passwordless authentication with Microsoft Entra ID (Azure AD) to enhance security and improve the user experience.

## Step 1: Obtain Oloid Tenant Configuration

To configure Oloid as an External Authentication Method in Microsoft Entra ID, gather the following details from your Oloid tenant:

**Client ID**

\<\<################################>>

**OIDC Endpoint**

[https://api.oloidpreview.com/oidc/showcase/eam/oauth2/.well-known/openid-configuration](https://api.oloidpreview.com/oidc/showcase/eam/oauth2/.well-known/openid-configuration)

**Authorization Endpoint**

[https://api.oloidpreview.com/oidc/showcase/eam/oauth2/authorize](https://api.oloidpreview.com/oidc/showcase/eam/oauth2/authorize)

## Step 2: Register and Configure an Application in Microsoft Entra ID

### Register an application

1. Log in to the Microsoft Entra ID **Portal** with an account that has **Global Administrator** permissions or sufficient access to create applications.
2. Navigate to **Microsoft Entra ID > App registrations > New registration**.

   ![Integrating Oloid as an External Method... - screenshot 1](https://mintcdn.com/oloid-999c42b2/51GqWWq_YZCZsrxn/images/intercom/10299916/image-9b70a01d.png?fit=max\&auto=format\&n=51GqWWq_YZCZsrxn\&q=85\&s=d9ab09df4f3b084ddd7a1e8e3283948d)

   The Register an application page is displayed.
3. Provide the following details:
   1. Enter **Name.**

   2. Enter **Redirect URI:** Select **Web** from the drop-down list and Use the **Authorization Endpoint** from [Step 1](#step-1-obtain-oloid-tenant-configuration) in the redirected URL field.

      > [!NOTE]
      >
      > **Note:** The **Authorization Endpoint** from theTenant Admin Portalis the **Redirect URL**.

   3. Click **Register**.

      ![Integrating Oloid as an External Method... - screenshot 2](https://mintcdn.com/oloid-999c42b2/51GqWWq_YZCZsrxn/images/intercom/10299916/5ae2d68d-02ac-4a0b-8ea2-59336b151d40-b476140f.png?fit=max\&auto=format\&n=51GqWWq_YZCZsrxn\&q=85\&s=5640a5b437cd747db754d8205e7d8fc6)

      The application is registered successfully.
      After registration, Copy the **Application ID** of the newly registered application.

      ![Integrating Oloid as an External Method... - screenshot 3](https://mintcdn.com/oloid-999c42b2/51GqWWq_YZCZsrxn/images/intercom/10299916/image-8aa40565.png?fit=max\&auto=format\&n=51GqWWq_YZCZsrxn\&q=85\&s=94ff2924a01fc4d02ff5bb03b26f3692)

### Configure the Application

1. Navigate to the **newly registered app > Manage >** **Token Configuration** > Click **+ Add optional claim**.

   ![Integrating Oloid as an External Method... - screenshot 4](https://mintcdn.com/oloid-999c42b2/51GqWWq_YZCZsrxn/images/intercom/10299916/da206faf-144e-414a-85db-070aab310801-65c21b73.png?fit=max\&auto=format\&n=51GqWWq_YZCZsrxn\&q=85\&s=ac5cbfb51c2f239d1a63184762bb7be1)

   The **Add optional claim** page is displayed.
2. Select **ID** as a Token type and do the following:
   1. Select **email.**
   2. Select **upn.**
   3. Click **Add**.

      ![Integrating Oloid as an External Method... - screenshot 5](https://mintcdn.com/oloid-999c42b2/51GqWWq_YZCZsrxn/images/intercom/10299916/b1a29278-1c2e-45a0-bfab-19a22fa51f9e-cb1004bc.png?fit=max\&auto=format\&n=51GqWWq_YZCZsrxn\&q=85\&s=2e24d008e9259fb7f5e94e657d87f49a)

      The **Add optional claim** pop-up box is displayed.
3. Select **Turn on the Microsoft Graph** checkbox and click **Add** to save the claims.

   ![Integrating Oloid as an External Method... - screenshot 6](https://mintcdn.com/oloid-999c42b2/51GqWWq_YZCZsrxn/images/intercom/10299916/image-0e8d6b8f.png?fit=max\&auto=format\&n=51GqWWq_YZCZsrxn\&q=85\&s=cfe5ffcaf9252ea02e8fd48c65ac95bd)
4. Go to **Manage** > **API permissions** > **Grant required permissions.**

   ![Integrating Oloid as an External Method... - screenshot 7](https://mintcdn.com/oloid-999c42b2/51GqWWq_YZCZsrxn/images/intercom/10299916/dbbe8d32-0ae3-4664-a028-7b31532f07ef-a1b3f0e3.png?fit=max\&auto=format\&n=51GqWWq_YZCZsrxn\&q=85\&s=f59a0ee040b14dfdf67bcdaeceebe333)

   The **Grant admin consent confirmation** pop-up box is displayed.
5. Click **Yes**.

   ![Integrating Oloid as an External Method... - screenshot 8](https://mintcdn.com/oloid-999c42b2/51GqWWq_YZCZsrxn/images/intercom/10299916/e90a3d34-5d1d-47b8-853c-a20991ff932b-707acfc2.png?fit=max\&auto=format\&n=51GqWWq_YZCZsrxn\&q=85\&s=09a7fe6d4780afd4249756527e5a4397)

   The API permission is configured successfully.

   ![Integrating Oloid as an External Method... - screenshot 9](https://mintcdn.com/oloid-999c42b2/51GqWWq_YZCZsrxn/images/intercom/10299916/6ca7a3b0-01ec-4afd-a405-3a5fbb58cde9-eac0a42f.png?fit=max\&auto=format\&n=51GqWWq_YZCZsrxn\&q=85\&s=0af33ce82910f64a638eb80081059fc4)

### Create Client Secret

1. Navigate to **newly registered app >** Click **Client Credentials.**

   ![Integrating Oloid as an External Method... - screenshot 10](https://mintcdn.com/oloid-999c42b2/51GqWWq_YZCZsrxn/images/intercom/10299916/1ee44ebf-eea6-4ddb-bf72-ece92b8eb814-ebdb680c.png?fit=max\&auto=format\&n=51GqWWq_YZCZsrxn\&q=85\&s=7d167071ed49078b28e650ffd37ec4fc)

   The Certificates & secrets page is displayed.
2. Click **New client secret**.

   ![Integrating Oloid as an External Method... - screenshot 11](https://mintcdn.com/oloid-999c42b2/51GqWWq_YZCZsrxn/images/intercom/10299916/f2e09888-5fd6-4ac6-b6ff-00c61c2cffce-441bc5bd.png?fit=max\&auto=format\&n=51GqWWq_YZCZsrxn\&q=85\&s=c2f517a6e3e4848b1a28b97f88366a64)

   The **Add a client secret** screen is displayed.
3. Do the following:
   1. Enter **Description**.
   2. Select the **secret expires** duration from the drop-down list.
   3. Click **Add**.

      ![Integrating Oloid as an External Method... - screenshot 12](https://mintcdn.com/oloid-999c42b2/qwbMwk0YkjvJXsJQ/images/intercom/10299916/image-a490bc35.png?fit=max\&auto=format\&n=qwbMwk0YkjvJXsJQ\&q=85\&s=c945b4169e070289c11ce34e8003e46a)

      The **Client Secret** is added successfully and listed on Client Secret tab.

      ![Integrating Oloid as an External Method... - screenshot 13](https://mintcdn.com/oloid-999c42b2/51GqWWq_YZCZsrxn/images/intercom/10299916/b8aaa1b5-8573-4bf8-b38e-9897cb6435f6-0bdba39f.png?fit=max\&auto=format\&n=51GqWWq_YZCZsrxn\&q=85\&s=7a81935bae9dd49d0852d371d5c8d9d3)

## Step 3: Configure External Authentication Method in Microsoft Entra ID

1. Navigate to **Application > Manage > Security.**

   ![Integrating Oloid as an External Method... - screenshot 14](https://mintcdn.com/oloid-999c42b2/51GqWWq_YZCZsrxn/images/intercom/10299916/b3bcdfe1-a960-40be-95f5-e77fe4a9f6df-eda9a648.png?fit=max\&auto=format\&n=51GqWWq_YZCZsrxn\&q=85\&s=baadfd2fcb23143de8461ca88532e0c4)

   The Security page is displayed.
2. Go to **Manage > Authentication Methods.**

   ![Integrating Oloid as an External Method... - screenshot 15](https://mintcdn.com/oloid-999c42b2/51GqWWq_YZCZsrxn/images/intercom/10299916/image-03bf6447.png?fit=max\&auto=format\&n=51GqWWq_YZCZsrxn\&q=85\&s=2fed0955bbffccceba951a4ca02e0495)

   The **Authentication methods** page is displayed.
3. Click **+Add external method (Preview)**.

   ![Integrating Oloid as an External Method... - screenshot 16](https://mintcdn.com/oloid-999c42b2/51GqWWq_YZCZsrxn/images/intercom/10299916/8833d411-085b-4b0f-9557-07ea85d0c720-8a6e314d.png?fit=max\&auto=format\&n=51GqWWq_YZCZsrxn\&q=85\&s=39764742e75a030f9233aea6254a16ea)

   The **Add external method (Preview)** screen is displayed.
4. Do the following:
   1. Enter **Name**.

   2. Enter **Client ID**.

      > [!NOTE]
      >
      > **Note:** Enter the **Oloid Client ID** in the **Client ID** field.

   3. Enter **Discovery Endpoint.**

      > [!NOTE]
      >
      > **Note:** Enter the **OpenID Configuration Endpoint** in the **Discovery Endpoint** field.

   4. Enter **App ID**.

   5. Click **Request Permission**.

      ![Integrating Oloid as an External Method... - screenshot 17](https://mintcdn.com/oloid-999c42b2/51GqWWq_YZCZsrxn/images/intercom/10299916/034e6566-74a4-430d-a9d7-f4eb99175c6f-70370cda.png?fit=max\&auto=format\&n=51GqWWq_YZCZsrxn\&q=85\&s=7f6c7bc9c4f4f565ec24b452faf56880)

      > [!NOTE]
      >
      > **Note:** You can view the **Oloid Client ID** and **OpenID Configuration Endpoint** in the **Metadata** tab in the Tenant Admin Portal. To see the Metadata tab, go to **Tenant Admin Portal > Auth Policies > Identity Provider > Select applicable OIDC (Entra ID) idP >** Oloid Metadata.

      ![Integrating Oloid as an External Method... - screenshot 18](https://mintcdn.com/oloid-999c42b2/51GqWWq_YZCZsrxn/images/intercom/10299916/image-36d853b8.png?fit=max\&auto=format\&n=51GqWWq_YZCZsrxn\&q=85\&s=1be2cdd261a03ccf9d3ae0f7e137ee56)
5. Accept the required permissions.

   ![Integrating Oloid as an External Method... - screenshot 19](https://mintcdn.com/oloid-999c42b2/51GqWWq_YZCZsrxn/images/intercom/10299916/image-a1bb4682.png?fit=max\&auto=format\&n=51GqWWq_YZCZsrxn\&q=85\&s=4ca578c3791f7b95c4ef1e940effdebc)
6. Click **Save** and enable the configuration.

   > [!NOTE]
   >
   > **Note:** Ensure that you select only the users who require Oloid as MFA. Do not apply this setting to all users.

   ![Integrating Oloid as an External Method... - screenshot 20](https://mintcdn.com/oloid-999c42b2/51GqWWq_YZCZsrxn/images/intercom/10299916/ba874b10-da1f-427b-86ea-cba7678ed9bb-88b4d220.png?fit=max\&auto=format\&n=51GqWWq_YZCZsrxn\&q=85\&s=6272ebe623a225711a34aaf7ef9c9812)

## Step 4: Provide Microsoft Entra ID Information to Oloid

Share the following details of your Microsoft Entra ID tenant with Oloid for final configuration:

**Configuration Detail**

**Value**

**Tenant ID**

Obtain from Microsoft Entra ID.

**Application ID**

Found under [Register an Application (Step 2)](#register-an-application).

**OIDC Endpoint**

Found under Azure App **Endpoints** section.

**Redirect URL**

Enter the Redirect URL [(Step 2)](#step-2-register-and-configure-an-application-in-microsoft-entra-id).

**Callback URL**

Optional

**Secret**

Found under [Create Client Secret (Step 2).](#create-client-secret)

The Tenant ID can be obtained from the following screen:

![Integrating Oloid as an External Method... - screenshot 21](https://mintcdn.com/oloid-999c42b2/51GqWWq_YZCZsrxn/images/intercom/10299916/image-61997960.png?fit=max\&auto=format\&n=51GqWWq_YZCZsrxn\&q=85\&s=f8a2c50400a9b496f8d30c3745bc142b)

### Instructions to Obtain Endpoints

1. Navigate to **App Registrations** > Select the registered application > **Endpoints**.

   ![Integrating Oloid as an External Method... - screenshot 22](https://mintcdn.com/oloid-999c42b2/qwbMwk0YkjvJXsJQ/images/intercom/10299916/image-f9105999.png?fit=max\&auto=format\&n=qwbMwk0YkjvJXsJQ\&q=85\&s=675345019ff52033dda8f01bc9dc6497)

   The endpoints list is displayed.
2. Copy the **OpenID Connect Meta data document URL**.

   ![Integrating Oloid as an External Method... - screenshot 23](https://mintcdn.com/oloid-999c42b2/51GqWWq_YZCZsrxn/images/intercom/10299916/f3ee1f62-bb74-4d30-b7e1-ff539e1b28fa-1d45ab44.png?fit=max\&auto=format\&n=51GqWWq_YZCZsrxn\&q=85\&s=1b6be643e437620b403145d70b92c47a)

   > [!NOTE]
   >
   > **Note:** Use OpenID Connect Meta data document URL in the Authorize URL field. To see the Authorize URL field, go to **Tenant Admin Portal > Auth Policies > Identity Provider > Select OIDC tab > IDP Settings.**

   ![Integrating Oloid as an External Method... - screenshot 24](https://mintcdn.com/oloid-999c42b2/qwbMwk0YkjvJXsJQ/images/intercom/10299916/image-a3611625.png?fit=max\&auto=format\&n=qwbMwk0YkjvJXsJQ\&q=85\&s=e046d1bc7d84f32fba5f556f7f54a9c7)

## Step 5: Apply Conditional Access Policies (Optional)

> [!NOTE]
>
> **Note:** Perform this step only if you need to protect a specific application by using Oloid as MFA or for selected user(s) group(s).

1. Navigate to **Oloid-AzureAD > Security.**

   ![Integrating Oloid as an External Method... - screenshot 25](https://mintcdn.com/oloid-999c42b2/51GqWWq_YZCZsrxn/images/intercom/10299916/b3bcdfe1-a960-40be-95f5-e77fe4a9f6df-21edce5f.png?fit=max\&auto=format\&n=51GqWWq_YZCZsrxn\&q=85\&s=42c8f8143704cd99bea5a9bd9dd56a4e)

   The security page is displayed.
2. Go to **Protect > Conditional Access.**

   ![Integrating Oloid as an External Method... - screenshot 26](https://mintcdn.com/oloid-999c42b2/51GqWWq_YZCZsrxn/images/intercom/10299916/a2f9cc91-d858-4cbc-aa1f-39782d344335-d2ed99fc.png?fit=max\&auto=format\&n=51GqWWq_YZCZsrxn\&q=85\&s=1a7d36d45b05da066112c766efd2f7c3)

   The **Conditional Access** page is displayed.
3. Click **Policy Snapshot**.

   ![Integrating Oloid as an External Method... - screenshot 27](https://mintcdn.com/oloid-999c42b2/51GqWWq_YZCZsrxn/images/intercom/10299916/image-1f74c0ff.png?fit=max\&auto=format\&n=51GqWWq_YZCZsrxn\&q=85\&s=c187f29618a87468bea8ca86625fa7e2)

   The **Policies** page is displayed.
4. Click **+New Policy**.

   ![Integrating Oloid as an External Method... - screenshot 28](https://mintcdn.com/oloid-999c42b2/51GqWWq_YZCZsrxn/images/intercom/10299916/395f401b-6344-4311-89ad-cbb72a03bb7c-8a6cc2f0.png?fit=max\&auto=format\&n=51GqWWq_YZCZsrxn\&q=85\&s=6643372d25890b665259523d9e220bcb)
5. Click **users or agents > Select Users and groups >** select **Users and Groups > Select the Preferred Group** from the list e.g. oloid.

   ![Integrating Oloid as an External Method... - screenshot 29](https://mintcdn.com/oloid-999c42b2/51GqWWq_YZCZsrxn/images/intercom/10299916/1aeecb5d-482f-4cc8-959f-967d6b0da1fb-7631326a.png?fit=max\&auto=format\&n=51GqWWq_YZCZsrxn\&q=85\&s=a60d8ace76f8629c48f4c76d006850f1)
6. On **Target Resources**, select an application e.g. Service Now.

   ![Integrating Oloid as an External Method... - screenshot 30](https://mintcdn.com/oloid-999c42b2/51GqWWq_YZCZsrxn/images/intercom/10299916/2ee32b84-1287-4c86-9fd0-4b62268e9e36-66f7981a.png?fit=max\&auto=format\&n=51GqWWq_YZCZsrxn\&q=85\&s=95fb6f17eeeb8d420ef5f21bcbd8af7a)
7. Click **Access Control** > Select **Grant access** > Click **Select**.

   > [!NOTE]
   >
   > **Note:** Select **Require multifactor authentication** checkbox.

   ![Integrating Oloid as an External Method... - screenshot 31](https://mintcdn.com/oloid-999c42b2/51GqWWq_YZCZsrxn/images/intercom/10299916/image-9294e318.png?fit=max\&auto=format\&n=51GqWWq_YZCZsrxn\&q=85\&s=92197ac5df06fa436d0f6f42c7daf820)
8. On Grant section, select **Require one of the selected controls**.

   ![Integrating Oloid as an External Method... - screenshot 32](https://mintcdn.com/oloid-999c42b2/qwbMwk0YkjvJXsJQ/images/intercom/10299916/image-ef922424.png?fit=max\&auto=format\&n=qwbMwk0YkjvJXsJQ\&q=85\&s=ec731ac5148425a701bdff06b82b69cd)
9. On **Enable Policy**, click **On > Save.**

   ![Integrating Oloid as an External Method... - screenshot 33](https://mintcdn.com/oloid-999c42b2/qwbMwk0YkjvJXsJQ/images/intercom/10299916/image-f81888ef.png?fit=max\&auto=format\&n=qwbMwk0YkjvJXsJQ\&q=85\&s=bfd6cf3fe240628ad607fdef288e1b98)

   The policy is configured successfully.

## Step 6: Test the Integration

Test the integration using an application managed by Microsoft Entra ID e.g. ServiceNow

1. Open the ServiceNow application URL: [https://\<\<servicenow\_tenant>>.service-now.com](https://dev270331.service-now.com)
2. Log in with a user account that meets the following criteria:
   * Belongs to the **snow-users** group.
   * Has access to the ServiceNow application.
3. After entering the password, the user will be prompted for **Oloid EAM**.

   ![A screenshot of a computer errorDescription automatically generated](https://mintcdn.com/oloid-999c42b2/51GqWWq_YZCZsrxn/images/intercom/10299916/AD_4nXd8d1x2RND_PUtb60agAA2NWWz2ToiG2kp0SYFQ1lKw-9c1d3403.png?fit=max\&auto=format\&n=51GqWWq_YZCZsrxn\&q=85\&s=822ff202b973e832497de9a7d0676e13)
4. Authenticate using Oloid MFA (ensure the user’s Oloid account has the same email as the Microsoft Entra ID UPN).
5. Upon successful authentication, the user will be logged into ServiceNow.

   ![A screenshot of a computerDescription automatically generated](https://mintcdn.com/oloid-999c42b2/51GqWWq_YZCZsrxn/images/intercom/10299916/AD_4nXcBH9-sjWs7RlZnARwIvSHkgAL-kA5VpBa6lyeQMPMB-8e152f44.png?fit=max\&auto=format\&n=51GqWWq_YZCZsrxn\&q=85\&s=225aa494bf1ac8947d993b5bee9b6493)