This article applies as of PRTG MultiBoard 25.5.0


Important Notice: The following article only applies to PRTG MultiBoard. This feature is not available for PRTG app for desktop.

How to enable SSO with PRTG MultiBoard

As of PRTG Multiboard 25.5.0, you can use Microsoft Entra ID and Okta as a single sign-on (SSO) provider in PRTG MultiBoard.

This article covers how to set up SSO with Microsoft Entra ID. For information on how to use Okta as an SSO provider, see the Knowledge Base: How can I use Okta to set up SSO with PRTG MultiBoard?.

Requirements

  • Requires as of PRTG MultiBoard 25.5.0
  • Requires administrative rights for Microsoft Entra ID and PRTG MultiBoard

Configure Microsoft Entra ID

Follow these steps to configure Microsoft Entra ID to work as SSO provider for PRTG MultiBoard.


Step 1: Register your app

First, create an application in Microsoft Entra ID unique to PRTG MultiBoard.


Using the Azure Portal

  1. Log in to the Azure Portal.
  2. Select Microsoft Entra ID under Azure services in the Azure Portal.
  3. Go to Manage | App registrations.
    App registrations


Using the Microsoft Entra admin center

  1. Log in to the Microsoft Entra admin center.
  2. Go to Applications | App registrations.
    App registrations


The only difference between the Azure Portal and the Microsoft Entra admin center is how you reach the App registrations tab. The rest of the process is the same regardless of wh.


  1. Click New registration. App registrations
  2. Enter a name, for example PRTG MultiBoard.
  3. Select Accounts in this organizational directory only.
    • Optional: Enter the redirect URI if you already know it. If you do not know it yet, you can enter it in step 2.
  4. Click Register to register the new app.

Your application is now available in Microsoft Entra.


Important: You need the authorization endpoint and token endpoint of the application for PRTG MultiBoard.


In the overview tab, click Endpoints. You can copy your endpoints directly from the pop-up dialog. Client and tenant

Step 2: Add a platform

Once you registered an application, you can create a platform and set up the redirect URI.

  1. Go to the Authentication tab.
  2. Click Add a platform.
  3. Select Mobile and desktop applications.
  4. Enter a custom redirect URI. The redirect URI uses the format https://IP_address:port/cb/.Enter a redirect URI


Example


ParameterDescription
IP addressPRTG MultiBoard is an native application, so the IP address is 127.0.0.1 in most cases.
PortUse the port that Microsoft Entra ID uses to communicate with PRTG MultiBoard. The default port is 43567.
cb/Enter the path of the callback URL.

This results in the following redirect URI: https://127.0.0.1:43567/cb/

5. Click Configure.

Step 3: Add users or group

With the application set up, you can assign access rights to users or groups.

  1. Return to the overview of the Azure Portal or Microsoft Admin Center.
  2. Navigate to Enterprise applications.
    Open enterprise applications
  3. Find the application you created and click on it to open the application overview.
  4. From the overview, either click 1. Assign users and groups or navigate to Manage | Users and groups.
    Note: You can only add users and froups that already exist in your Microsoft Entra.
    Add user
  5. Click Add User/Group.
  6. Under Users and groups click None Selected.
  7. Search for the users or groups you want to give SSO access to. Enable the checkmark next to their name and click Select.
  8. Click Assign.

(Optional) Step 4: Restrict Access

If you want to only allow specific users to have access to the application, you need to restrict access to the application:

  1. On your organization overview page, click Enterprise applications.
  2. Find the application you created and click on the name.
  3. Navigate to Manage | Properties.
  4. Enable the Assignment required? setting.Restrict access
  5. Click Save at the top of the page.

You have now successfully configured Microsoft Entra ID.

Configure SSO in PRTG MultiBoard

Now that you have configured Microsoft Entra ID, you need to configure the SSO settings in PRTG MultiBoard accordingly.

You need the following:

SettingDescription
Client IDThe client ID of your application. You can find the client ID in the Overview tab of your app in Entra ID.
Authorization EndpointThe authorization endpoint of your application. You can find this in the Endpoints tab on your application overview in Entra ID. You most likely will use the authorization endpoint v2.
Token EndpointThe token endpoint of your application. You can find this in the Endpoints tab on your application overview in Entra ID. You most likely will use the token endpoint v2.
PortThe port you entered in the redirect URI that you configured in step 2.
Callback URLThe callback path you entered in the redirect URI that you configured in step 2.
  1. In PRTG MultiBoard, navigate to File | Settings | SSO.
  2. Enter your credentials.
    Enter your SSO credentials
  3. Enable the check box that states Trust this device if you want PRTG MultiBoard to trust the refresh token from Okta. This means that you do not need to sign in every time you open PRTG MultiBoard.
  4. Enable the check box that states that you understand that you cannot undo SSO on PRTG MultiBoard once you configure it.
  5. If you want, use the Test SSO Endpoint to test the connection and credentials.
  6. Click Save to save your changes.
  7. Restart PRTG MultiBoard to activate the changes.
    SSO configuration successful!