Install the Jet Service Tier or Jet Hub with Microsoft Entra ID

This features is available in Jet Reports 2019 R2 and higher.

Overview

When you start the Jet Setup program, you will be asked to select the type of user management your organization uses.

Assuming you have an Azure account for your organization and that you have already created an Microsoft Entra ID, you can create Microsoft Client Applications that allow you to use Microsoft Entra ID to manage your users within Jet Products.

This functionality does not require additional or premium licensing on the part of Microsoft Entra ID.

Register your App

To register the application, perform the following steps:

1. Sign in to Azure portal (Microsoft Azure).

2. Go to Microsoft Entra ID > App registrations > +New registration. The Register an application page is displayed.

   

3. In Name, provide a name for your application.

4. In Supported Account Types , select Account in this organizational directory only (This is the default setting).

5. In Redirect URI (optional), select Web from the dropdown and enter your Jet Hub URL.

   The URL must start with https:// and contain the base URL that users use to sign in to the Jet Hub. The URL either contains the machine name on which the Jet Hub is installed or the DNS entry for the Jet Hub site.

   Examples:

   https://myservername.mydomain.com

   https://dnsname.mydomain.com

6. Click Register.

   

Configure your App

To configure your application, perform the following:

1. Sign in to Azure portal (Microsoft Azure).

2. Go to the Authentication page. The Authentication page is displayed.

   

   1. In Web > Redirect URIs, add the following URIs:

      • https://<JetHubURL>/account/logout

      • https://<JetHubURL>/signin-aad

      • https://<JetHubURL>/identity/signin-aad

      • https://<JetHubURL>/identity/external/callback

   2. In Front-channel logout URL, add the following URL:

      https://<JetHubURL>/account/logout

   3. Select Access tokens (used for implicit flows) and ID tokens (used for implcit and hybrid flows) to enable implicit grant and hybrid flow.

   4. Click Save.

      

3. Go to Certificates & secrets > Client secrets > +New client secret. The Add a client secret window is displayed.

   

   1. In Description, enter a description for your client secret.

   2. In Expires, choose the appropriate expiration time.

      For the Jet app expire option, 24 months is the recommended duration.

   3. Select Add. The Client secrets tab is displayed.

      Make note of the generated secret value.

      

4. Go to API permissions > +Add a permission > APIs my organization uses. search and select Microsoft Graph. The Microsoft Graph window is displayed.

   

   1. Select Application permissions.

      

      1. Expand Directory and select Directory.Read.All.

      2. Expand Group and select Group.Read.All.

      3. Select Add permissions.

         

   2. Go to API permissions > +Add a permission > APIs my organization uses. Search and select Microsoft Graph. The Microsoft Graph window is displayed. Select Delegated permissions.

      

      1. Expand Group and select Group.Read.All.

      2. Select Add permissions.

         

   3. From the API Permissions page, click the Grant admin consent for <DomainName> button. Then, select Yes in the confirmation dialog.

      

      Go to the Overview page and make note of the Application (client) ID and the Directory (tenant) ID.

      

Install Jet Reports

Note: Not all steps are shown, just those pertaining directly to configuring for use with Microsoft Entra ID.

1. Double-click Jet Reports Services Setup.

2. When prompted, enter the Jet Hub URL. Click NextThe Configure the Network Connection Settings window is displayed.

   Enter the name of the server and port number used to access for the Jet Service Tier, and the URL (web address) that will be used for connecting to Jet Hub.

   The Jet Service Tier field will pull the fully-qualified domain name (FQDN) of the machine that the installer is running on. If this is the machine that you are installing the Jet Service Tier on, this will need to stay the same.

   The Jet Hub URL should also usually be set to the FQDN of the server it will reside on. If you do not know what to enter here, it is generally correct to copy the value in the first box into the third box, and click Next. The Authentication method window is displayed.

   

3. Select Microsoft Entra ID > Next. The Client Application Details window is displayed.

4. Enter the client application details that you saved to notepad and select Next.

   Please note that the Client Secret is the Secret Value and not the Secret ID.

5. On the Jet Service Tier settings page, sign into an Microsoft 365 account. This will be the first user and administrator in the Jet Service Tier and Jet Hub. Select Next to continue the install.

Add Users and Data Sources

To add Jet users and Data Sources to run your reports, go to User And Data Source Management In Jet Hub.