Azure Active Directory Authentication for AIQ

Azure Active Directory Authentication for AIQ
Use this article when integrating AIQ authentication with Azure Active Directory, now Microsoft Entra ID. Confirm tenant, application registration, redirect URL, claims, and user/group assignments before enabling the integration for users.
Configuration checklist
Create or confirm the Entra ID application registration for AIQ.
Set the redirect URI to the exact AIQ URL users will access.
Configure required claims, scopes, and group assignments according to the customer's access model.
Store client secrets or certificates securely and track expiration dates.
Test with a limited pilot group before enabling broad access.
Validation workflow
Confirm login redirects from AIQ to the expected tenant.
Validate successful login, failed-login behavior, and role/group mapping.
Check that logout and session timeout behavior match policy.
Document tenant ID, app registration owner, secret expiration, and support contact.
Last updated: October 8, 2026