Page History

...

Configuration

Azure AD Setup

1. Define API App Role

   Before external systems can be granted access, an App Role must be defined in the API

Create

2. App Registration.

• Name: PartnerPortal-External-{CompanyName}
• Account type: Single tenant

3. Go to:

   • Microsoft Entra ID → App registrations

   • Open EGU.PartnerPortal.ApiService

   Navigate to App roles → Create app role.

   Configure the role:

   Field	Value
   Display name	External System Access
   Allowed member types	Applications
   Value	ExternalSystem.Access
   Description	Allows external systems to access turnaround report data

   Save the role.
   
   

4. Create External System App Registration

   • Create a separate application registration for each external company.

     Go to:

     • Microsoft Entra ID → App registrations

     • Select New registration

     Configuration:

     Setting	Value
     Name	{CompanyName}-PartnerPortal-Access
     Supported account types	Accounts in this organizational directory only
     Redirect URI	Leave blank

5. Generate Client Secret

   Generate Client Secret

   • 1. Open the newly created PartnerPortal-External-{CompanyName} app.

   • 1. Navigate to Certificates & secrets.

     Create new

     1. Click New client secret

     Store securely (never commit to code)

     1. .

     2. Copy the secret value immediately and store it securely.

     ⚠️ The secret value cannot be viewed again after creation.

     Never commit secrets to source control.
     
     

6. Assign Permissions

   • Add permission: EGU.PartnerPortal.ApiService
   • Select: ExternalSystem.Access
   • Grant admin consent

7. Company Mapping (API side configuration)

   {
     "ExternalCompanies": {
       "Ravdex": {
         "AppId": "1f018c75-2ea9-4d46-a4f1-a45d2d47d043",
         "CompanyNumber": "YOUR_COMPANY_NUMBER",
         "Name": "Ravdex"
       }
     }
   }