1 | Select the [Use Microsoft Entra ID] checkbox. |
2 | Click [Domain Settings]. The [Microsoft Entra ID Domain Settings] screen is displayed. |
3 | Specify the Microsoft Entra ID information. [Login Destination Name] Enter the name to be displayed at the login destination. * You cannot use control characters or spaces. [Domain Name] Enter the domain name of the Microsoft Entra ID that is the login destination. [Application ID] Enter the application (client) ID. [Secret] Enter the secret generated by Microsoft Entra ID. You do not need to enter this when [Key and Certificate] is used. [Key and Certificate] Press [Key and Certificate] when you use a key and certificate. You can press [Export Certificate] to export the certificate to be registered to Microsoft Entra ID. [Microsoft Entra ID Authentication URL] and [Microsoft Entra ID API URL] Enter the URLs. Depending on your cloud environment, you may need to change the settings. |
4 | Specify the attributes. [Login Name] From the pulldown menu, select the attribute for the login name of each user account on the server. * To specify an attribute not displayed in the pulldown menu, you can enter it directly. [WindowsLogonName]: displayName is obtained from Microsoft Entra ID. displayName is changed as follows to create the login name: Spaces and the following characters are deleted from displayName: * + , . / : ; < > = ? \ [ ] |. "@" and any subsequent characters are deleted. Character strings exceeding 20 characters are shortened to 20 characters or less. Example: When userPrincipalName is "user.002@mail.test," the login name becomes "user.002." [displayName]: displayName obtained from Microsoft Entra ID becomes the login name. [userPrincipalName]: userPrincipalName obtained from Microsoft Entra ID becomes the login name. [userPrincipalName-Prefix]: The portion before "@" in userPrincipalName obtained from Microsoft Entra ID becomes the login name. Example: When userPrincipalName is "user.002@mail.test," the login name becomes "user.002." [Display Name] and [E-Mail Address] Enter the attributes for the display name and e-mail address of each user account on the server. |
5 | Specify the domain name of the login destination in [Domain Name] under [Domain Name to Set for Login Account]. |
6 | Specify the settings in [Autocomplete for Entering User Name When Using Keyboard Authentication] under [Domain Name to Autocomplete]. Enter the name of the domain for which to perform autocomplete. Normally, set the same name as entered in [Domain Name]. |
7 | Click [Connection Test] to test the connection. |
8 | Click [Update]. The screen returns to the [Edit Server Settings] screen. |