Enterprise
The Enterprise Settings section allows administrators to configure how WorkSpaces Manager (WSM) integrates with enterprise authentication providers, Microsoft Entra ID, and self-service capabilities. These settings are divided into four main sections:
It is strongly recommended to create two separate App Registrations when integrating Microsoft Entra ID with both OpenID Connect (OIDC) for SSO and Microsoft Graph for group synchronisation.
This is because:
OIDC integrations use Delegated API Permissions operate in the context of a signed-in user
Microsoft Graph synchronisation uses Application API Permissions allow background server-to-server communication without user interaction
Using separate App Registrations improves:
Security separation
Permission governance
Troubleshooting
Security approval workflows
Operational clarity
Last updated