diff --git a/src/pages/manage/team/entra-id-app-enablement.mdx b/src/pages/manage/team/entra-id-app-enablement.mdx index 90576118..70aa87a9 100644 --- a/src/pages/manage/team/entra-id-app-enablement.mdx +++ b/src/pages/manage/team/entra-id-app-enablement.mdx @@ -7,24 +7,34 @@ Before your organization can use Microsoft Entra ID features with NetBird, such ## Prerequisites - A Microsoft Entra ID tenant -- An account with **Global Administrator** or **Cloud Application Administrator** role +- An account with the **Privileged Role Administrator** or **Global Administrator** role + + + **Cloud Application Administrator may not be enough.** Microsoft allows that role to grant consent for any + API *except* Microsoft Graph application permissions. NetBird's provisioning and group sync read directory + data through Microsoft Graph, so if the consent screen lists Graph application permissions, the grant has to + come from a **Privileged Role Administrator** or a **Global Administrator**. + ## Step 1: Find the NetBird Enterprise Application -1. Sign in to the [Azure portal](https://portal.azure.com) -2. Navigate to **Home** → **Microsoft Entra ID** → **Enterprise Applications** +1. Sign in to the [Microsoft Entra admin center](https://entra.microsoft.com) +2. Navigate to **Entra ID** → **Enterprise apps** → **All applications** 3. Search for the application with Application ID: `7a7538de-b7ed-4e49-befe-edbe74d5e0a1` 4. Select the **NetBird** application from the results +You can reach the same blade from the [Azure portal](https://portal.azure.com) under +**Microsoft Entra ID** → **Enterprise applications**. +

Find NetBird in Enterprise Applications

## Step 2: Grant Admin Consent -1. In the NetBird application overview, click **Permissions** in the left menu -2. Click **Grant admin consent for Default Directory** -3. Review the requested permissions and confirm +1. In the NetBird application overview, select **Permissions** under **Security** +2. Review the requested permissions carefully, then click **Grant admin consent for ``** +3. Confirm the consent prompt

Grant admin consent for NetBird diff --git a/src/pages/manage/team/idp-sync/google-workspace-sync.mdx b/src/pages/manage/team/idp-sync/google-workspace-sync.mdx index ecaa867e..25e753da 100644 --- a/src/pages/manage/team/idp-sync/google-workspace-sync.mdx +++ b/src/pages/manage/team/idp-sync/google-workspace-sync.mdx @@ -110,7 +110,7 @@ Navigate to [https://console.cloud.google.com/apis/credentials](https://console. ![Google Workspace Service Account](/docs-static/img/manage/team/idp-sync/google-workspace-sync/rDU0Puv.png) Complete the form with the supplied values: -* `NerBird` for the service account name +* `NetBird` for the service account name * `netbird` for the service account ID Click `DONE` when ready. diff --git a/src/pages/manage/team/single-sign-on/auth0.mdx b/src/pages/manage/team/single-sign-on/auth0.mdx index 0f69a525..310711b9 100644 --- a/src/pages/manage/team/single-sign-on/auth0.mdx +++ b/src/pages/manage/team/single-sign-on/auth0.mdx @@ -13,12 +13,19 @@ You can use Auth0 as your Identity Provider with NetBird, but it will require so 2. Click **+ Create Application** -3. Enter **NetBird** as the name, select **Single Page Web Applications** as the application type and click **Create** +3. Enter **NetBird** as the name, select **Regular Web Applications** as the application type and click **Create**

auth0-application-create

+ + The application type has to be **Regular Web Applications**. NetBird exchanges the authorization code + server-side using a Client Secret, which makes this a confidential client. Auth0 treats single-page and + native apps as public clients and does not show a Credentials tab for them, so those types never issue the + Client Secret you record in step 5. + + 4. On the New Application screen, go to the Settings tab and under Application URIs set the following values: - **Application Login URI**: `https://app.netbird.io` - **Allowed Callback URLs**: `https://login.netbird.io/login/callback` diff --git a/src/pages/manage/team/single-sign-on/jumpcloud.mdx b/src/pages/manage/team/single-sign-on/jumpcloud.mdx index 8b143f7f..cf511c20 100644 --- a/src/pages/manage/team/single-sign-on/jumpcloud.mdx +++ b/src/pages/manage/team/single-sign-on/jumpcloud.mdx @@ -9,7 +9,7 @@ You can use JumpCloud as your Identity Provider with NetBird, but it will requir The Free plan supports Google, Microsoft, and social logins. -1. Access JumpCloud and navigate to USER AUTHENTICATION > SSO Applications +1. In the JumpCloud Admin Console, navigate to **Access** > **SSO Applications** 2. Click + Add New Application, select Custom Application and click Next @@ -43,6 +43,11 @@ You can use JumpCloud as your Identity Provider with NetBird, but it will requir 9. Record the Client ID and Client Secret that JumpCloud generates for your application. + + JumpCloud shows the Client ID and Secret only once, right after you click activate. Copy them before closing the window, otherwise you have to regenerate the secret. + + + 10. Share your Client ID and Client Secret with our team, along with the region your JumpCloud console is in (US, EU, or India). Please use a secure method for sharing this information.