Microsoft EAM integration
Overview
This guide walks you through connecting Microsoft Entra ID’s External Authentication Method (EAM) with the Evo Portal, so your users can satisfy Microsoft’s MFA prompts using Evo’s authentication. Microsoft EAM integration will be set up on a per-directory basis.
Configuration
- Locate the Integrations tab under Evo Admin
- Navigate to Microsoft EAM and hit Configure
- Once here you’ll be shown the list of Directories you have Microsoft EAM configured for. To select a new directory hit the +New on the top right
- From here you will select the Directory you wish to Enable with Microsoft EAM and once selected hit Enable EAM on far right
Once here you’re going to be greeted with settings to bring over and configure in your Microsoft Entra ID ( Formerly Azure Active Directory ) application.
Setup Instructions:
- Access Microsoft Entra Admin Center: Log in to your Entra ID tenant at https://entra.microsoft.com as a global administrator.
- Navigate to Authentication Methods: Go to Authentication Methods → Policies.
- Add External Method: Click + Add External Method.
- Configure Method Details: Enter a descriptive name (e.g., "Evo MFA") - users will see this name during authentication. Copy and paste the Client ID from above Copy and paste the Discovery Endpoint from above Copy and paste the App ID from above
- Grant Admin Consent: If you see "Request permission" instead of "Admin consent granted", verify the App ID is correct, then click the permission button and check "Consent on behalf of your organization" before accepting.
- Configure User Targeting: Choose which groups should have access to this authentication method. By default, it applies to all users with MFA requirements. (If using EAM for Web Accounts, setup a group for the Web Accounts users and target that group)
- Enable the Method in Entra: In Entra, below the fields toggle Enable from Off to On if you want to activate immediately.
- Save Configuration: Click Save to create the Evo external authentication method.
Note: Microsoft Entra ID may take up to 10-15 minutes to apply new External Authentication Settings. If sign-ins fail during this time, try again shortly.
Microsoft EAM is now Configured!
If Microsoft keeps asking to set up another MFA method , there's a setting in azure you can disable to turn that off.
- Authentication Methods -> Registration Campaign -> Disable
Did this answer your question?
😞
😐
🤩