Note: if you haven't setup Graph API permissions, verify application will fail, skip over this step Authorization Return to 'Configure Global Security' to configure authorization Save the configuration, (logged-in users will have permission to do anything) If you are not an admin in your tenant, please contact an admin to grant the permissions.Ĭlick Manage Jenkins in the left menu, then click Configure Global Security AuthenticationĬheck Azure Active Directory and fill in the credential.Ĭlick Verify Application to make sure your input is valid. Note: You can skip this part and just use the claims returned when authenticating.Īdd '', '' and 'People.Read'Ĭlick Grant admin consent.

Group display name support (rather than just object ID).Autocompleting users and groups on the 'Configure Global Security' page.In order for Jenkins to be able to lookup data from Azure AD it needs some Graph API permissions.

Setup Azure AD permissions (optional, but recommended) (optional) To enable AzureAD group support: Click Manifest and modify the 'groupMembershipClaims': 'None' value to 'groupMembershipClaims': 'SecurityGroup', then 'Save' it.

Ĭlick Certificates & secrets, under Client secrets click New client secret to generate a new key, copy the value, it will be used as Client Secret in Jenkins.Ĭlick Authentication, under 'Implicit grant', enable ID tokens.

Open Azure Active Directory, click App registrationsĪdd a new Reply URL Make sure 'Jenkins URL' (Manage Jenkins => Configure System) is set to the same value as Important: This plug-in is maintained by the Jenkins community and won’t be supported by Microsoft as of February 29, 2024.Ī Jenkins Plugin that supports authentication & authorization via Azure Active Directory.

Azure ad admin login