Create Middleware SSO Application

Step 1. Go to Azure Active Directory, and open App Registrations. Create a new one by selecting New registration button:

Select the supported accounts types and press Register.

Step 2. Open Authentication section and press Add a platform:

Add a web application:

Add the redirect URL of https://token.botframework.com/.auth/web/redirect

Press Register button.

Step 3. Go to the section of Expose and API, and press Add a scope, leaving the default value:

Provide the Scope Name (can be any).

Press Add scope button.

Add authorization to this scope for the bot service application ID (check in Create Azure Bot Channel)

Step 4. Under Certificates and Secrets, add a client secret and write it down.

If you want to restrict access to this app – find the same app under Enterprise Application and change the setting of User Assignment Required to Yes, then add users in Users and groups section.

Step 5. Paste your copied Application ID and Client Secret into the appropriate fields in the Identity Providers application – Middleware Section (refer to the Bot Management Configuration Guide for details). Save your entries.