OIDC For Microsoft Azure/Entra

Recorded Future only supports an SP-initiated flow. Please use the guide below to configure SSO via OIDC for your user's ease of access. 

Please follow the instructions below to configure OIDC in your Azure/Entra tenant. 

1. Sign in to the Microsoft Entra admin center as at least a Cloud Application Administrator.

2. Browse to Identity > Applications > App registrations and select New registration.

3. Enter a display Name for your application. Users might see the display name when they use the app. You can change the display name at any time. The app registration's automatically generated Application (client) ID, not its display name, uniquely identifies your app within the Identity platform.

4. Specify who can use the application, sometimes called its sign-in audience.

5. In the Redirect URI section:

   • Select the Web platform

   • Set the Redirect URI to https://id.recordedfuture.com/login/callback


     

6. Register your application.

7. After registering, navigate to Certificates & secrets, add a New Client Secret, and provide a description. This description is different than the app registration display name.

8. Enter your desired expiration and Add.

9. You are then directed to the resulting Client Secrets page.

10. Copy the Secret ID to provide to Recorded Future.
    

    

11. Go to Branding & Properties and add the attached logo to make it easier for users to identify the app visually.

    

12. Navigate to Overview and then Getting Started to Assign users and groups.
    
    

    

13. Go To Identity, Applications, and App Registrations and gather the Application (client) ID to provide to Recorded Future
    

14. Go into the application to view the Overview page and go to Endpoints to get your .wellknown/openid-config metadata link to provide to Recorded Future.
    

15. Logo file attached here: