Skip to main content
Feedback

Setting up Microsoft Entra ID as an IdP

To set up Microsoft Entra ID as an IdP for Boomi Connect, you must first register an application in Entra and gather its connection details. Then, register the application as an IdP in Boomi Connect.

Prerequisites

Make sure that you fulfill the following requirements before you start creating an IdP in Boomi Connect for your Microsoft Entra application.

  • An account with administrator access to the Microsoft Entra admin center.

  • An application registered in Microsoft Entra ID. Refer to Register an application in Microsoft Entra ID for more information.

    note

    The example described in this topic uses the recommended account type, Single Tenant Only - MSTF. It restricts access to user and guest accounts in the current directory (tenant). You can view information about all other account types by clicking Help me choose in the Microsoft Entra admin center.

  • The Application (client) ID and OpenID Connect (OIDC) metadata document values from the application's Essentials and Endpoints sections.

  • The client secret value for your application. You create this client secret and must copy the value immediately after creating it because Microsoft Entra ID never displays it again. Refer to Add and manage app credentials in Microsoft Entra ID for more information.

  • Boomi Connect's callback URL added to the application's redirect URI in Microsoft Entra ID. The URL follows the pattern {environment-domain}/oauth/identityprovider/oauth/callback. For example, for the US production environment, this URL is https://us.bc.boomi.com/oauth/identityprovider/oauth/callback. Only the domain changes between environments. The path segment, /oauth/identityprovider/oauth/callback, remains the same.

Configuring Microsoft Entra ID IdP for Boomi Connect

  1. Log in to the Boomi Connect environment that matches the callback URL you registered in your Microsoft Entra application. For example, if the callback URL you registered points to the US production environment, us.bc.boomi.com, log into Boomi Connect on that environment.

  2. On the left sidebar, click Identity Providers.

  3. On the Identity Providers page, click Add Identity Provider.

  4. In the Add Identity Provider form, provide the following information:

    1. For Name, enter a name for the IdP. This name is arbitrary and used only within Boomi Connect.

    2. For Well-Known URL, enter the OIDC metadata document URL you copied from the application's Endpoints section.

    3. For Client ID, enter the Application (client) ID you copied from the application's Essentials section.

    4. For Client Secret, enter the confidential credential your Microsoft Entra application uses to authenticate itself with Microsoft Entra ID. You must keep this credential a secret because exposure allows unauthorized token issuance.

    5. Click Add Provider.

The new Microsoft Entra ID IdP appears as a tile on the Identity Providers page and is ready to use.

On this Page