> For the complete documentation index, see [llms.txt](https://docs.controlbee.nl/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://docs.controlbee.nl/en/profiel/omgevingsbeheer/instellingen-omgevingsbeheer.md). # Environment management settings Set up two-factor authentication and Single Sign-On via Microsoft Azure In environment management, two-factor authentication can be configured, and Single Sign-On can be linked via Microsoft Azure.

Het scherm Omgevingsbeheer — The Environment Management screen

## Set up Single Sign-On To manage these settings, you must have the environment manager role in ControlBee. In addition, an administrator of the Microsoft Azure environment of the relevant organization must be available. The Environment Management page contains three fields: * **Client ID** — also called application ID in Azure. The unique code by which ControlBee is identified within the Microsoft environment. * **Client secret** — the key (the password) that ControlBee needs to connect to the Microsoft environment. * **Tenant ID** — the unique code by which ControlBee finds the relevant Microsoft environment.

De drie velden voor de Azure-koppeling — The three fields for the Azure connection

## Step-by-step plan ### 1. Go to the organization's Azure portal Via [portal.azure.com](https://portal.azure.com). This must be done by someone with administrator rights in the Microsoft environment. ### 2. Navigate to App registrations and click New registration

App-registraties in het Azure-portaal — App registrations in the Azure portal

### 3. Register the application * Enter **Name** a recognizable name, for example 'ControlBee SSO'. * Choose **supported account types** for 'Accounts in this organizational directory only'. * Choose **Redirect URL** for Web and enter the URL of the ControlBee environment, followed by `/azure/callback`. * Click **Register**.

Het registratieformulier — The registration form

### 4. Copy the client ID and tenant ID to ControlBee

De cliënt-id en tenant-id in Azure — The client ID and tenant ID in Azure

Overnemen in het formulier in ControlBee — Transfer to the form in ControlBee

Het ingevulde formulier — The completed form

### 5. Navigate to Certificates and secrets and click New client secret

Certificaten en geheimen — Certificates and secrets

### 6. Enter a description and choose the key validity period

Geldigheid van het clientgeheim — Client secret validity period

### 7. Copy the key from the Value field

### 8. Paste the value in ControlBee and save

De sleutel opslaan in ControlBee — Saving the key in ControlBee

### 9. Log out and on the login screen choose Log in with Azure Email address and password can be left blank.

### 10. Accept the permissions The first time you log in via Azure, the permissions must be accepted. After that, logging in should succeed.

Het machtigingenscherm — The permissions screen

Succesvol ingelogd — Successfully logged in

{% hint style="warning" %} The value of the client secret is only visible once. If the key has expired, the step-by-step plan must be repeated from step 5 onwards. {% endhint %} {% hint style="info" %} Only users with the environment manager role can then still log in with a username and password. All other user types are always redirected to Azure, even if they enter a username and password. {% endhint %} --- # Agent Instructions This documentation is published with GitBook. GitBook is the documentation platform designed so that both humans and AI agents can read, navigate, and reason over technical content effectively. Learn more at gitbook.com. ## Querying This Documentation If you need additional information that is not directly available in this page, you can query the documentation dynamically by asking a question. Perform an HTTP GET request on the current page URL with the `ask` query parameter, and the optional `goal` query parameter: ``` GET https://docs.controlbee.nl/en/profiel/omgevingsbeheer/instellingen-omgevingsbeheer.md?ask=&goal= ``` `ask` is the immediate question: it should be specific, self-contained, and written in natural language. `goal` is optional and describes the broader end goal you are ultimately trying to accomplish on behalf of the user. GitBook uses it to tailor the answer towards what is most useful for that goal. The response will contain a direct answer to the question and relevant excerpts and sources from the documentation. Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.