Setup

Configure authentication to get started.

Step 1: First User

Add the first superadmin user before configuring authentication. This user will have full access to the application.

Step 2a: Automated Setup

Sign in with a Global Administrator account to automatically create the EasyAuth app registration and configure this App Service.

Only users from the tenant you sign in with can access this app.

Step 2b: Manual Setup

If you already have an app registration, enter the details below.

Only users from the specified tenant can access this app.
How to create the app registration manually
  1. Go to Entra ID > App registrations > New registration
  2. Name: Craft-EasyAuth-App
  3. Supported account types: Accounts in this organizational directory only (Single tenant)
  4. Redirect URI: Web — {your-app-url}/.auth/login/aad/callback
  5. After creation, go to Authentication > enable ID tokens under Implicit grant
  6. Go to Certificates & secrets > New client secret > copy the Value (not the ID)
  7. Copy the Application (client) ID and Directory (tenant) ID from the Overview page

No API permissions are needed — this app is only used for EasyAuth sign-in, not for Graph API calls.