Configuration of Hideez Cloud as an External Authentication Method for Microsoft Entra ID via OIDC

Hideez Identity Cloud - Configuration OIDC for Entra ID as an External Authentication Method

Configure OIDC for Entra ID

Please note! Hideez Server as an External Authentication Method does not allow logging into Entra ID, but serves only as an additional MFA verification method. To use this feature, an Entra ID P1 license is required.

This guide explains how to integrate Microsoft Entra ID with Hideez Server using OIDC for authentication. It enables seamless external authentication via Entra ID, allowing users to log in securely through a unified platform.

Additional Resources

For further setup guidance, refer to the following articles:

• Validating tokens issued by Microsoft Entra ID

Step 1: Register the App in Microsoft Entra

1. Log in to Microsoft Entra Admin Center.

2. Navigate to Identity → Applications → App registrations.

3. Click + New registration.

4. Define a name for the app.

5. Set Supported account type to:

   • Accounts in any organizational directory (Any Entra ID directory - Multitenant).

6. Under the Redirect URI section:

   • Select Web platform.

   • Enter: https://idp-69d5d91ab8.us.hideez.io/connect/authorize.

   
7. Click Register.

After registering, keep the Application ID from the Essentials section. You'll need it later to configure your EAM in Hideez Cloud.

Step 2: Configure Integration in Hideez Cloud

1. Log in to Hideez Cloud.

2. Go to Integrations -> OIDC.

3. Click Create App Integration.

4. Select App Type: Entra ID External Authentication Method (EAM).

5. Fill in the following:

   • Tenant ID

   • Application ID

6. Click Create.

Keep the Client ID, Discovery Endpoint, and Entra Application ID ready for the next step.

Step 3: Add External Method in Entra ID

1. Go back to Microsoft Entra Admin Center.

2. Navigate to Protection > Authentication Methods > Policies.

3. Click + Add external method (Preview).

4. Set the following parameters:

   • Name: Enter the name users will see during login.

   • Client ID: Copy from the app integration in Hideez Cloud.

   • Discovery Endpoint: Copy from the app integration in Hideez Cloud.

   • App ID: Copy from the app integration in Hideez Cloud.

   
5. Click Request permission to grant admin consent for the app to read user information.

6. Click Enable.

1. Review Included and Excluded Targets (all users are included by default).

2. Click Save.