Improve DVLS server Microsoft authentication

Improve DVLS server Microsoft authentication

avatar

Hello.
I have a suggestion to improve the MS authentication configuration documentation.

Configure Microsoft authentication with Entra ID - Devolutions Documentation

First, I would avoid jumping around between Entra ID and DVLS Server Administration.
I would show how to completely configure the application registration and then copy / paste most values from its overview.
This is obviously different for the secret for the secret configuration.

Secondly, I would show a complete example of how to configure an app registration with application permissions and one for delegated rights permissions. This because it's always tricky to follow a guide which has exceptions and small additions to avoid missing an important setting.

Thirdly, I would advise to show all app permissions required for both application permissions and delegated rights permissions:

  1. Configure DVLS with application permissions
    1. delegated rights for :
      1. openid
      2. profile
      3. offline_access
    2. application permissions for :
      1. user.read
      2. user.read.all
      3. group.read.all
  2. Configure DVLS with delegated rights permissions
    1. openid
    2. profile
    3. offline_access
    4. user.read
    5. user.read.all
    6. group.read.all


Last, please add additional required settings like the token "ID tokens (used for implicit and hybrid flows)" required for the application permission authentication mode.

Thank you.
Marcel

All Comments (1)

avatar

Hello Marcel,

Thank you for your feedback. This is a great suggestion and we will look into it to see if we can make the page easier to follow.

Regards,

Émile Simard
Technical writer

Ends in 10 days