Identity Settings - RiskForge Admin

User management mode

User Management Mode

Options

Allow manual user creation

Allow user invitation

Require email confirmation

Auto-create users from external directory

Enable Microsoft Entra ID sync

Default role for manually created users

Default role for synced users

Microsoft Entra ID

Store only a secret reference (e.g. entra-riskforge-tenant-abc-client-secret). Store the real secret in user-secrets or Azure Key Vault using that reference — never store the raw client secret here.

Your Microsoft Entra administrator must grant admin consent to the configured app registration for Microsoft Graph application permissions such as User.Read.All (and GroupMember.Read.All when using group-based sync).

For production tenants, group-based sync is recommended to avoid importing the entire directory.

Entra Tenant ID

Entra Client ID

Entra Client Secret Reference

Local example: dotnet user-secrets set "ExternalIdentity:Entra:YOUR-REFERENCE" "CLIENT_SECRET" --project src/RiskForge.Api

Entra Domain

Entra Sync Group ID

Last sync

Last sync at: —
Status: —
Message: —

Tenant Identity Settings

User management mode

Options

Microsoft Entra ID

Last sync