Learn how to configure Microsoft Entra ID authentication for your Azure Function so that Reltio can securely invoke Azure Lifecycle Actions (LCAs).

1. Contact Reltio support to create and share your Azure App ID
2. Create a Service Principal using the Reltio App ID. For example, az ad sp create --id <reltioAppId> - where the <reltioAppId> is the Azure app id shared by Reltio.
   Note: Only users with Azure AD admin roles (such as Global Administrator or Application Administrator) can run this command. Regular users or non-directory admins will receive an error.
3. Enable authentication on the Azure Function App.
   1. In the Azure Portal, go to your Function App.
   2. Under Settings, select Authentication.
   3. In the Basics section, in the Identity Provider field, select Microsoft.
   4. In the App registration section, in the App registration type field, choose to Create a new app registration , Pick an existing app registration in this directory or Provide the details of an existing app registration.
      
   5. Enter the Name and set an appropriate Client secret expiration based on your organization's security policy.
   6. In the Additional checks section, under the Client application requirement, select Allow requests from specific client applications.
   7. Add the Reltio App ID provided to you.
   8. Select Add.
4. Ensure an Application ID URI is exposed for the app registration used in the identity provider configuration. If not already exposed, expose it by setting: api://<Your Application ID> .
5. Navigate to the identity provider settings you just added (click Edit).
6. Add this URI as the audience so that Reltio tokens can be accepted.
7. Save the configuration.