Install Platform-Enabled Jet Service Tier or Jet Hub with Microsoft Entra ID Authentication

To install Jet Hub or Jet Service Tier with Microsoft Entra ID authentication, perform the following steps:

1. Configure Microsoft Entra ID for Jet Hub

2. Install Jet Hub or Jet Service Tier

Configure Microsoft Entra ID for Jet Hub

To configure the Microsoft Entra ID for Jet Hub, perform the following steps:

1. Register an Application

2. Configure the Application

Register an application

To register an application, perform the following steps:

1. Sign in to Azure portal (Microsoft Azure).

   Important: The user signing in need not be an Azure administrator, but admin consent will be required at a specific point in the process.

2. Go to Microsoft Entra ID > App registrations > +New registration. The Register an application page is displayed.

3. In Name, provide a name for your application.

4. In Supported Account Types , select Account in this organizational directory only (This is the default setting).

5. In Redirect URI (optional), select Web from the dropdown and enter your Jet Hub URL.

   The URL must start with https:// and contain the base URL that users use to sign in to the Jet Hub. The URL either contains the machine name on which the Jet Hub is installed or the DNS entry for the Jet Hub site.

   Examples:

   https://myservername.mydomain.com

   https://dnsname.mydomain.com

6. Click Register.

Configure the Application

To configure application, perform the following steps:

1. Sign in to Azure portal (Microsoft Azure).

2. Go to the Authentication page. The Authentication page is displayed.

   1. In Web > Redirect URIs, add the following URIs:

      • https://<JetHubURL>/account/logout

      • https://<JetHubURL>/signin-aad

      • https://<JetHubURL>/identity/signin-aad

      • https://<JetHubURL>/identity/external/callback

   2. In Front-channel logout URL, add the following URL:

      https://<JetHubURL>/account/logout

   3. Select Access tokens (used for implicit flows) and ID tokens (used for implcit and hybrid flows) to enable implicit grant and hybrid flow.

   4. Click Save.

3. Go to Certificates & secrets > Client secrets > +New client secret. The Add a client secret window is displayed.

   1. In Description, enter a description for your client secret.

   2. In Expires, choose the appropriate expiration time.

   3. Select Add. The Client secrets tab is displayed.

      Make note of the generated secret value.

4. Go to API permissions > +Add a permission > APIs my organization uses. search and select Microsoft Graph. The Microsoft Graph window is displayed.

   1. Select Application permissions.

      1. Expand Directory and select Directory.Read.All.

      2. Expand Group and select Group.Read.All.

      3. Select Add permissions.

   2. Go to API permissions > +Add a permission > APIs my organization uses. Search and select Microsoft Graph. The Microsoft Graph window is displayed. Select Delegated permissions.

      1. Expand Group and select Group.Read.All.

      2. Select Add permissions.

   3. Go to the Overview page and make note of the Application (client) ID and the Directory (tenant) ID.

The noted values will be used during the installation of Jet Hub.

Install Jet Hub or JetService Tier

To install the platform-enabled Jet Service Tier or Jet Hub with Microsoft Entra ID authentication, perform the following steps:

1. Register License

2. Register Service and Grant Permissions

3. Configure Jet Hub or Jet Service Tier Settings

Note: The instructions to configure Jet using only Microsoft Entra ID authentication are covered.

Register Your License

To register your organization's license, perform the following steps:

1. When you first start the Jet Setup program, you will be asked to enter your product activation code. Enter the Platform specific activation code sent via email.

2. Select the components you want to install and select Next. The Authentication page is displayed.

3. On the Authentication page, select Microsoft Entra ID > Next. The Platform Authentication page is displayed.

4. Select sign into my account and verify your account is in the proper organization.

5. Enter your app registration details (Tenant ID, Client ID, Client Secret) that you have noted while configuring Microsoft Entra ID) and select Next. The Register your on-premise license is displayed.

6. Select Register license to add insightsoftware’s product API to your company. The insightsoftware platform is displayed.

   Note: Do not close the Register your on-premise license window. This page is required while configuring settings.

   

Register Service and Grant Permissions

To register service and grant permissions, perform the following steps

1. On the insightsoftware platform, on the Service to service page, select Register Service. The Register service window is displayed.

   Add the required information:

   • Name: Enter a name of the service

   • Tenant ID: Enter Tenant ID that you have noted while configuring Microsoft Entra ID.

   • Application ID: Enter Application ID or Client ID that you have noted while configuring Microsoft Entra ID.

   • Then select Add Platform API to Azure Tenant. The Permissions requested page is displayed.

   • Select Accept.

2. Sign in to Azure portal and grant the following permissions:

   Select +Add a permission > APIs my organization uses > Search and select Licensing Products API . TheLicensing Products API window is displayed.

   

   1. Select Delegated permissions > access_as_user.

   2. Select +Add a permission > APIs my organization uses > Search and select Licensing Products API . TheLicensing Products API window is displayed. Select Application permissions > licenses.read.

   3. Select Add permissions

   4. At the bottom of the API Permissions page, select Grant admin consent for <DomainName> button. The confirmation dialog box is displayed.

   5. Select Yes.

   Important: Exit the insightsoftware Platform!

Configure Jet Hub or Jet Service Tier settings

To configure Jet Hub or Jet Service Tier settings, go to Register your on-premise license page that was displayed while registering license.

1. On the Register your on-premise license page, select Next. The Configure the Jet Service Tier Settings window is displayed.

   

2. Select Network Service, Add Rules to Windows Firewall, and select Next. The Configure the Jet Hub settings page is displayed.

3. Select any of the following and select Next.

   • Automatically enable all required IIS features (recommended)

   • I will manually enable the IIS features required by the Jet Hub

   The Database configuration window is displayed.

4. If you want to sign in using SQL server instance, select Login using the service 'Run As' account and provide the required information.

   If you want to sign in using database authentication, select Login using database Authentication and provide the required information.

5. Select Next.

6. Sign in to the Microsoft account as a Jet Services administrator and then select Next. The Start Installation page is displayed.

7. Select Install.