Skip to main content

Entra ID (Azure AD) Integration

Administrator

This guide details how to integrate your Microsoft Entra ID (formerly Azure Active Directory) tenant with DataCentral. This allows your internal users to log in using their existing Microsoft credentials.

DataCentral supports two Entra ID models at a high level:

  • Shared host authentication: Your DataCentral host provides the Entra ID application used for sign-in.
  • Dedicated tenant authentication: Your organization registers its own Entra ID application so you can control branding, conditional access, and tenant-specific sign-in behavior.

This guide covers the dedicated tenant setup.

Prerequisites​

Before beginning, ensure you have:

  1. Global Administrator or Privileged Role Administrator access to your Microsoft Entra ID portal.
  2. Tenant Administrator access to your DataCentral instance.

Step 1: Register an Application in Entra ID​

You must register DataCentral as an application within your Azure portal.

  1. Log in to the Microsoft Entra admin center.
  2. Navigate to Identity > Applications > App registrations.
  3. Click New registration.
  4. Enter a name for the application (e.g., DataCentral Auth).
  5. Select Accounts in this organizational directory only (Single tenant).
  6. Under Redirect URI, select Web and enter the callback URL provided in your DataCentral Administration settings (e.g., https://yourcompany.datacentral.ai/auth/callback).
  7. Click Register.

Step 2: Configure Authentication Settings​

Configure the app registration for interactive sign-in with OpenID Connect.

  1. In your App Registration, go to Authentication.
  2. Confirm the redirect URI matches the callback URL configured in DataCentral.
  3. Under Implicit grant and hybrid flows, enable ID tokens if your tenant policy or app platform settings require it for sign-in.
  4. Click Save.

Step 3: Configure API Permissions​

You must grant the application the delegated permissions needed for user sign-in and profile identification.

  1. Go to API permissions.
  2. Click Add a permission.
  3. Select Microsoft Graph.
  4. Select Delegated permissions.
  5. Check the following permissions:
    • User.Read
    • profile
    • email
    • openid
  6. Click Add permissions.
  7. Click Grant admin consent for [Your Tenant Name].

Step 4: Configure DataCentral​

Now, return to DataCentral to complete the integration.

  1. Log in to your DataCentral Tenant as an Administrator.
  2. Navigate to Administration > Settings > Authentication.
  3. Enable Entra ID.
  4. Enter the following details from your Azure App Registration:
    • Client ID: Found on the Overview page of your App Registration.
    • Tenant ID: Found on the Overview page of your App Registration.
  5. Click Save.

Your users can now log in to DataCentral using their Microsoft 365 credentials.

Next Steps​

If you plan to use DataCentral to embed reports for users who do not have their own Power BI Pro licenses, you will also need to configure a Power BI Service Principal.