Updated in Version 6.0
KDQ Agentic uses OpenID connect to authenticate users.
User management including managing access to Workspaces is managed in KDQ.
Entra ID
Step 1: Register a KDQ App in Entra ID
This step is performed by the Azure Entra ID Administrator
-
Log in to your company’s Azure Portal and open the Entra ID page
-
Select App Registration in the side panel and click New registration
-
Complete the registration form.
-
Follow your company’s standard policy for the Supported account types
-
Leave the Redirect URL blank. We will complete this later
-
-
Click on the newly created KADA KDQ App
-
Save the Application (client) ID for use in a later step
-
Click on Endpoints and save the URL for OpenID Connect metadata document for use in a later step
-
Select Certificates & secrets in the side panel and click New client secret
-
Complete the new secret form and save the Secret Value for use in a later stope
-
Select API permissions in the side panel and click Grant admin consent for [tenant]. This will allow the application to read and authenticate requests
Make sure you’ve saved the following information for easy access for Step 2.
If a different team is responsible to completing the Keycloak steps, make sure you include the below information in the request.
-
Application (client) ID
-
URL for OpenID Connect metadata document
-
Secret value
Step 2: Deploy the KDQ Application and configure the Domain name
-
See KDQ Deployment Guide
-
Your Redirect URL will be in the form of https://example.com/auth/callback with example.com being the domain name applied to KDQ
Step 3: Complete Azure Active Directory Setup
-
Log in to your company’s Azure Portal and open the Entra ID page
-
Select the App Registration tab and open the KADA KDQ App you created in Step 1
-
Select Authentication from the side panel and click Add a platform
-
Select Web, paste the URL Redirect URL you copied from Step 2 and click Save
Step 4: Add users / groups to the KADA KDQ App
-
Log in to your company’s Azure Portal and open the Entra ID page
-
Select the Enterprise Applications tab and open the KADA KDQ App you created in Step 1
-
Select Users and Groups from the side panel and click Add user/group
-
Search for users or groups and add them to the Application
Any user assigned to the application will be able to log into KDQ.
Access to workspaces and permissions per workspace are managed in KDQ.