How to Set Up Microsoft SSO (Entra ID)

Step 2 – Access App Registrations

After opening Microsoft Entra ID, select App registrations from the left-hand navigation menu (as shown in the image below).



Step 3 – Create a New App Registration

On the App registrations page, click New registration to create a new application integration in your Microsoft Entra ID environment (as shown in the image below).

Step 4 – Configure the New Application

On the Register an application page, complete the following steps:

1. Enter a name for the application.

   We recommend using "Urmobo MDM" to make it easier to identify.

2. Under Supported account types, keep the default option (or select the option that best fits your organization's requirements).
3. Under Redirect URI, select Web as the platform type.

4. In the URI field, enter the following address exactly as shown:

   https://mdm.urmobo.com.br/home/MSAuthCallback

⚠️ Important: Make sure to copy the URL exactly as shown above. Any mistake in this field may prevent the authentication process from working correctly.



Step 5 – Save the Credentials and Access Certificates & Secrets

After completing the application registration, Azure will display the details of the newly created application.

Record and securely store the following information:

• Application (Client) ID
• Directory (Tenant) ID

These values will be required later when configuring Single Sign-On (SSO) in the Urmobo portal.

Next, in the application's left-hand menu, select Certificates & secrets (as shown in the image below).



Step 6 – Generate a New Client Secret

On the Certificates & secrets page, click New client secret to create a new secret that will be used to authenticate with Urmobo (as shown in the image below).



Step 7 – Configure the Client Secret

In the window that appears after clicking New client secret:

1. Enter a description (name) for the secret, for example: Urmobo Secret.
2. Select the desired expiration period (e.g., 6 months, 12 months, or 24 months).

⚠️ Important: Once the secret expires, authentication will stop working.

You will need to generate a new client secret and update the configuration in the Urmobo portal to restore SSO access.

Click Add to complete the process.



Step 8 – Copy the Client Secret Value

After creating the client secret, immediately copy the generated secret value by clicking the indicated button (as shown in the image below).

⚠️ Important: This value is displayed only once. Make sure to copy it and store it securely.

The client secret value, together with the Application (Client) ID and Directory (Tenant) ID, will be required to configure SSO authentication in the Urmobo console.



Step 9 – Access the Environment in the Urmobo Portal

With the information obtained from Azure (Application (Client) ID, Directory (Tenant) ID, and Client Secret), sign in to the Urmobo portal using an account with administrator privileges.

1. From the Top Menu, navigate to Administration > Environments.
2. Locate the environment you want to configure.

Step 10 – Access the Environment Settings

On the Environments page, locate the desired environment and click Settings to open its configuration details (as shown in the image below).



Step 11 – Configure Microsoft Entra ID Authentication in the Urmobo Portal

On the Entra ID tab within the environment settings, enter the information obtained from the Azure portal:

• App ID
• Tenant ID
• Client Secret

After entering all the required information, click Save (as shown in the image below).


 

Optional: Enforce SSO-Only Login

If you want users to access the portal exclusively through SSO, enable the SSO Login Only option on the Settings tab.

That's it! Your users can now authenticate using Microsoft Single Sign-On (SSO).

⚠️ Important:
Make sure the email address registered in the Urmobo portal matches the user's email address in Microsoft Entra ID. Otherwise, authentication will not work correctly.