Set up OIDC on Azure Active Directory

Complete the steps below to configure OIDC on Azure AD. Begin by first adding an OpenID application on Azure.

1. On the Azure portal, select Azure Active Directory.
2. Select Enterprise applications > All applications.
3. Select New application from the dialog box.
4. Create the Prisma Cloud Config using the values listed below:

   1. Client ID config element: Find this under AAD Registered Application → Overview. Use value of Application (client) ID under Essentials section.
   2. Client Secret config element: Find this under AAD Registered Application → Secrets and Certificates. Generate a new Client Secret and use this value. Make sure you note the expiration date and set up a scheduled refresh.
   3. Issuer config element: Find this here https://login.microsoftonline.com/
   4. Auth URI config element: Find this here https://login.microsoftonline.com/common/oauth2/v2.0/authorize
   5. Token URI config element: Find this here https://login.microsoftonline.com/common/oauth2/v2.0/token
   6. JWK Set URI config element: https://login.microsoftonline.com/common/discovery/keys