If you want to authenticate Microsoft Entra ID users in SiteKiosk Online Cloud, follow these simple steps to configure your settings correctly. Click here for the SiteKiosk Online Server (on-premise) instructions.
This guide walks you through creating your Entra App Registration, setting up your redirect and logout URLs, and granting the proper permissions for communication between Entra ID and SiteKiosk Online Cloud.
Download the Entra Authentication SiteKiosk Online Cloud PDF guide here.
Step 1: Open Microsoft Entra and Create a New App Registration
- Sign in to your Microsoft Entra Admin Center. Navigate to Entra ID > App registrations.
- Select New registration.
- Name your app SiteKioskOnline (or another descriptive name). This name is referred to as “
yourEntraAppName” below. - Under Platform, choose Web.
- Click Register to create the new app.
Step 2: Record Your Application Details
After registering, locate and save these two values from the app overview page:
-
Application (client) ID
-
Directory (tenant) ID
You’ll need these when connecting SiteKiosk Online to Entra.
Step 3: Add Redirect and Logout URIs
- In your app’s left‑side menu, go to Authentication.
- Add your redirect URI in this format:
https://<yourCompany>.us.sitekiosk.online/auth/signin-oidc-<yourEntraAppName> - Then, add your logout URI (for example:
https://<yourCompany>.us.sitekiosk.online/auth/signout-callback-oidc-<yourEntraAppName>. - Save your changes.
These URLs allow SiteKiosk Online to handle sign‑in and sign‑out actions securely through Entra.
Step 4: Create a Client Secret
- Go to Certificates & secrets.
- Click New client secret and name it something identifiable, such as SiteKioskOnlineSecret.
- Choose your expiration period and click Add.
- Copy the Value of the client secret immediately. You won’t be able to view it again later.
Record your Client Secret Value to send in along with the Entra details you collect.
Step 5: Assign Application Permissions
- Click API permissions in your app menu.
- Select Add a permission.
- Choose Microsoft Graph > Application permissions.
- Add the following permissions:
Group.Read.AllUser.Read.All- Click Grant admin consent and confirm when prompted.
Once permissions are granted, Entra can securely share user and group details with SiteKiosk Online.
Step 6: Connect Entra with SiteKiosk Online
Now that Entra is configured, you can send these details you collected to the SiteKiosk support team. They’ll complete the backend connection for you. See checklist below.
In the steps above you collected the following Entra information to apply to the SiteKiosk Online Cloud settings. Ensure you have this info before proceeding.
- Subdomain (e.g. yourcompany.us.sitekiosk.online)
- Application (client) ID
- Directory (tenant) ID
- Entra app name
- Client secret value
- Entra user group name
- Entra User Principal Name (UPN) for initial administrator. Example: username@azureaccountname.onmicrosoft.com
Entra Authentication SiteKiosk Online FAQ
Q: What is the first step to set up Entra Authentication SiteKiosk Online?
A: Log into your Microsoft Entra Admin Center, navigate to Entra ID > App registrations, and click New registration to create an app named SiteKiosk Online with your server hostname as the redirect URI.
Q: What Entra ID details do I need to record for SiteKiosk Online?
A: Note down the Application (client) ID and Directory (tenant) ID from the app overview page, plus the Client Secret Value from Certificates & secrets—these are required for both Cloud and self-hosted server configurations.
Q: How do I add redirect and logout URIs in Entra for SiteKiosk Online?
A: In the Authentication section of your app, add Web platform URIs like https://<yourCompany>.us.sitekiosk.online/auth/signin-oidc-<yourEntraAppName> for redirect and https://<yourCompany>.us.sitekiosk.online/auth/signout-callback-oidc-<yourEntraAppName> for logout, then save.
Q: What permissions does the Entra app need for SiteKiosk Online authentication?
A: Under API permissions, add Microsoft Graph Application permissions: Group.Read.All and User.Read.All, then click Grant admin consent for your tenant (re-authenticate if prompted).
Q: What happens when I activate Entra Authentication for SiteKiosk Online Cloud?
A: Existing manually created users are removed and replaced by members from the specified Entra group.
Q: Can I use Entra Authentication SiteKiosk Online with SiteKiosk Online Cloud?
A: Yes, complete the Entra app setup and send your Client ID, Tenant ID, and Client Secret to SiteKiosk support—they handle the backend Cloud configuration for you.
Q: Why can’t my Entra users log in to SiteKiosk Online?
A: Most likely, the individual users or group as a whole do not have a user role assigned. Select the user or group and click the Add Role button, select a role and save.
