Versions Compared

Version Old Version 13 New Version Current
Changes made by

Blagica

Blagica

Saved on

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

...

  1. App registrations*

    1. gateway-service

    2. internal-client

    3. external-integration-client

    4. go-cli

  2. Scopes

    1. custom_scope

  3. App roles

    1. modelop_client

  4. Access token version: 2

Note

*When registering a new app, ensure you use the "App registrations" option under the “Applications” menu, and not the "Enterprise applications" option. Each option provides different settings, and selecting the wrong one will prevent you from completing the configuration successfully.

Proposed
Application Name

Platform Type

Client
Secret
Required

Scopes & API Permissions

App Roles & API Permissions

Token Claims

Redirect URIs

gateway-service
(C2B)

  1. Web

✔

  • openid

  • profile

  • email

    • offline_access

    • custom_scope

    • family_name

    • given_name

    • preferred_username

    • email

    • groups

    • https://<ModelOp Center URL>/login/oauth2/code/gateway-service

    internal-client
    (B2B)

    ✔

    • Group.Read.All**

    • modelop_client

    • idtyp

    external-integration-client
    (C2B)

    1. Single-page application

    2. Mobile and desktop applications

    • custom_scope

    • family_name

    • given_name

    • preferred_username

    • email

    • groups

    1. Single-page application; Redirect URIs

      1. https://<ModelOp Center URL>/jupyterOauth2ImplicitGrant.html

      2. https://<ModelOp Center URL>/modelOpWDC.html

    2. Mobile and desktop applications; Redirect URIs

      1. https://oauth.powerbi.com/views/oauthredirect.html

    go-cli
    (C2B)

    ✔

    • custom_scope

    • family_name

    • given_name

    • preferred_username

    • email

    • groups

    ...

    **The Group.Read.All permission for Microsoft Graph is necessary only if a customer is unable to include the group names, instead of group ids, as part of the access token. With Group.Read.All permission granted, ModelOp Center will be able to retrieve the group names from Microsoft Graph and display them instead of their ids throughout the platform. For details on how to grant permission Group.Read.All, please refer to Microsoft Entra ID: How-to guide.

    ...