EntraID

Introduction

The EntraID module communicates with Microsoft Graph using certificate-based client credentials. Configure either a PKCS12 certificate file or a keystore-backed certificate and private key.

Configuration

Note

Module name: EntraID

Properties

Name	Description	Default	Mandatory
namespace	Namespace used to correlate module requests and valves.
http_client_name	Name of the HttpClient destination.	"default"
client_id	Entra application/client ID.
tenant_id	Entra tenant ID.
assertion_ttl	Lifetime of the signed client assertion in milliseconds.	5000
certificate_file_path	Path to a PKCS12 certificate file. When set, this certificate source is used instead of keystore.
certificate_alias	Certificate alias in certificate_file_path.	"1"
certificate_password	Password for certificate_file_path.	""
keystore	Keystore object containing the certificate and private key. Required when certificate_file_path is not configured.
keystore_alias	Key alias in the keystore.	"1"
keystore_password	Keystore key password when the keystore source is used.
audit.create	Record successful create operations in audit.	false
audit.update	Record successful update operations in audit.	false
audit.delete	Record successful delete operations in audit.	false

Certificate file example

{
  "name": "EntraID",
  "config": {
    "namespace": "default",
    "http_client_name": "default",
    "client_id": "b6e27dbf-8bb8-49bf-a2a0-3a32140b045a",
    "tenant_id": "9576dfaf-0f8a-49d9-982e-40839345c6bc",
    "assertion_ttl": 5000,
    "certificate_file_path": "/path/to/certificate.pfx",
    "certificate_alias": "1",
    "certificate_password": "password",
    "audit": {
      "create": true,
      "update": true,
      "delete": true
    }
  }
}