Configure Microsoft Entra ID for Intellek LMS v4

<< Click to Display Table of Contents >>

Navigation:  »No topics above this level«

Configure Microsoft Entra ID for Intellek LMS v4

Clients upgrading to LMS v4 must add the new LMS v4 callback URL provided by Intellek to their SSO application to ensure proper functionality after the upgrade is complete. The new callback URI is designed for a Single-page application (SPA) in LMS v4, which differs from the Web application method used in LMS v3.

In addition, the LMS v4 callback URL must be added to both the Trusted Sites security zone and Pop-up Blocker exception lists.

Use the following steps as a guide to configure Microsoft Entra ID for LMS v4.

Register the Application

1.Open a web browser and sign in to the Microsoft Entra admin center using an account with administrative privileges.

2.Navigate to Entra ID > App Registrations, then select New registration.  

3.In the Name field, enter a descriptive name for the application, i.e. Intellek LMS SSO.

4.Under Supported account types, select Accounts in this organizational directory only.

5.Under Redirect URI:

oSelect Single-page application as the platform.

oEnter the redirect URI (callback URL) provided by Intellek, i.e. https://[name.v4.namelms.com/authentication/sso/callback]

6.Click Register.

Record the Application Details

After registration is complete copy and save the following values for future configuration:

oApplication (client) ID

oDirectory (tenant) ID

tparrowNote: These values are required when configuring authentication within LMS v4.

Configure Authentication Settings

1.In the application menu, select Authentication.

2.Verify the redirect URI is correct.

3.Under Implicit and hybrid flows, select the following checkboxes:  

oAccess tokens (used for implicit and hyrid flows)

oID tokens (used for implicit and hybrid flows)

4.Click Save.

Configure API Permissions

1.Select API permissions, then click Add a permission.

2.Grant the following permissions with Admin consent:

For Single Sign-On (SSO):

oUser.Read (Delegated permissions)

For Outlook Decline Functionality grant the Entra Application the following Application permissions (not Delegated) with Admin consent:

oUser.Read.All

oCalendar.Read

For additional information, see Outlook Decline - Technical Information.

Create a Client Secret

1.Select Certificates & secrets, then New client secret.

2.Enter a description and select an expiration period.

3.Click Add.

4.Copy and securely store the Client secret value. This value cannot be retrieved after you leave this page.

Configure LMS v4

Clients who have upgraded to LMS v4 can configure and manage their Single Sign-on credentials directly from the SSO Provider tab within the LMS Setup Authentication tool. See Configuring Authentication Methods.