Page Comparison

...

1. In Microsoft Entra ID, go back to "Microsoft Entra ID" and then to "App registrations".

2. Find and select the "Vivi" application.

3. Click "Manifest" to view the JSON configuration.

4. Find "groupMembershipClaims" and change the value from null to "SecurityGroup" (with quotes).

5. 

   Continuing in Microsoft Entra ID, go back to the Vivi application from the Enterprise Application list and click "Single sign-on".

6. For "Logout URL" enter “https://api.vivi.io/api/v1/users/saml_logout/<your organisation id>” and click “Save”,

   1. The following guide from Microsoft shows where this Organisation/Tenant ID can be found: https://docs.microsoft.com/en-us/partner-center/find-ids-and-domain-names

7. Go back to "Enterprise applications" -> "Vivi" -> "Users and Groups".

8. Only users and groups explicitly added here will be able to sign in to the Vivi App. You will need an "Object ID" to match each of the Vivi roles.

   1. Nested groups cannot be assigned in Microsoft Entra ID according to Microsoft: https://docs.microsoft.com/en-us/azure/active-directory/enterprise-users/directory-service-limits-restrictions

   2. Please ensure that you are only using Security Groups. Distribution Groups and other types of groups are not supported.

9. Alternatively, you can disable "User assignment required?" in "Vivi" -> "Properties" to allow all users to sign in.

...