Deployment guide

Customer Microsoft Entra sign-in

Register a customer domain and tenant, then assign its portal roles.

1. 1In the SecureUse Entra app registration, select accounts in any organisational directory. Keep the web redirect URI set to the deployed HTTPS /auth/callback URL. Keep the operator tenant configured in ENTRA_TENANT_ID.
2. 2Define SecureUse.Admin and SecureUse.Support application roles. In each customer’s enterprise application, obtain administrator consent, require user assignment, and assign authorised users or groups to those roles.
3. 3As a Bit Precision administrator, open the customer’s Organisation settings and Customer Microsoft sign-in. Confirm domain ownership and the customer tenant UUID before registering its exact work-email domains. Wildcards and shared tenant mappings are not supported.