Instructions to create canvas app registration for single-sign on for the web

(1) Share

Report

Posted on by newall

In the instructions to Configure single-sign on for web, the section "Create app registrations for your custom website" states that you need to follow the instructions in Configure user authentication with Microsoft Entra ID to create an authentication app registration and then repeat the instructions to create a second canvas app registration.

Do all of the instructions on the latter page need to be completed to create the canvas app registration, or just the instructions in section "Create an app registration"?

Categories:

General topics

I have the same question (0)

All responses (3)

Answers (0)

Sort by

Artur Stepniak 1,539 Moderator on at

Like
a
(0)

Report
Copy link

Link copied!

Hello,

I guess you'd need to perform all the steps. On which points do you have doubts?

Best regards,

Artur Stepniak

Was this reply helpful? Yes No
Suggested answer

Vinoth Selvam 1,597 Super User 2025 Season 1 on at

Like
a
(0)

Report
Copy link

Link copied!

Hi newall,

Yes we need to perform all the steps required. Most importantly make sure you give the proper API permissions to Microsoft graph connector.

These API permissions varies based on what knowledge sources you are connecting to.

Thanks.

Was this reply helpful? Yes No
newall 4 on at

Like
a
(0)

Report
Copy link

Link copied!
Hi Artur,

Many thanks for your reply. The points that I have doubts on are:

For the canvas app registration, following both pages of instructions would result in the canvas app registration having 3 authentication redirect URIs - https://token.botframework.com/.auth/web/redirect, https://europe.token.botframework.com/.auth/web/redirect and my own chat canvas URI.

The app registration instructions say to generate a client secret, but the secret appears to only be used for configuring manual authentication - related to the next point.

Configure manual authentication - Repeating these steps for the canvas app registration would overwrite the values entered for the authentication app registration.

Define a custom scope - These steps and the Configuring SSO instructions seem to suggest that they wouldn't need to be repeated for the canvas app registration.

Was this reply helpful? Yes No