Skip to main content

Azure Application

Lets users log in to HocNota with their Microsoft account (Azure AD SSO), from Admin → Azure AD.

Configuration​

  • Tenant ID.
  • Client ID and client secret — registered on your organization's Azure AD application.
  • Redirect URI — automatically pre-filled from the application's public URL (see Application Settings) if you don't set it yourself.
  • Enable SSO — toggle that shows (or hides) the "Sign in with Microsoft" button on the login page.

A "Test" button checks that the given tenant really exists, by querying Microsoft's public OpenID Connect discovery endpoint — without exposing your client secret.

These same credentials (tenant/client/secret) are reused by:

  • The Microsoft Teams bot, if you choose to share the SSO tenant rather than configuring one dedicated to the bot.
  • Email sending via Microsoft Graph, if you choose that backend (see Email Configuration) — it then requires the Mail.Send application permission on this same Azure app.