Step 3: Set the public URL in UMP-365 and Entra ID
Every URL that UMP-365 or Entra ID provides to a browser must be the public HTTPS address on the WAF, never the VM name or http://localhost.
|
➢
|
To configure the public URL: |
|
1.
|
In UMP-365, configure the following: |
| Setting |
Where |
Value |
PublicServerUrl
|
Application settings in the central SysAdminTenant database |
https://ump.example.com. The installer sets http://localhost |
| Teams token app redirect URI |
UMP System Settings page |
https://ump.example.com/authenticate/api/customerInvitation/OAuth2Callback
|
|
2.
|
In Entra ID, add the following redirect URIs to the app registrations used by UMP-365, and remove any http:// entries that are no longer used. |
| App registration purpose |
Redirect URIs |
| Administrator sign-in to the UMP-365 web application |
https://ump.example.com/tenantui/signin-aad · front-channel logout https://ump.example.com/tenantui/signout-aad · https://ump.example.com/tenantui/signout-callback-aad |
| Customer onboarding through the Customer portal |
https://ump.example.com/authenticate/api/customerInvitation/OAuth2Callback
|