External authentication providers
In larger organizations, a central employee directory is maintained, which can be integrated via a separate login service. It may be that linqi redirects you to a login server of an external service.
Login Flow
linqi supports OpenID Connect (OIDC), OAuth 2.0 providers, LDAP and SAML.
External authentication providers
If you want to connect an external authentication provider, you must switch to the list of external login services (). There you can create a new login service or remove existing connections using the top right button.
For performance reasons, linqi's login servers cache the external authentication providers. It can therefore take up to 20 minutes for the new authentication provider to be used for all users.
Microsoft Entra ID
To connect Microsoft Entra ID, you need an App registration in Entra ID. You can then take the Tenant Id, Client Id from this app registration. You must also create a client secret so that linqi can synchronise the users and groups in the background.
The requirements for the app registration can be found directly in the panel for creating the external login service.
You will also find a link at the bottom of this panel which you can use to log in with your linqi account if there are problems logging in with Entra ID. This can happen if the app registration in Entra ID has not been carried out correctly.
Field assignment
If you have created additional user values, you can specify here how these fields from Microsoft Entra ID should be filled. To do this, simply select the source field from Entra ID in the respective dropdown.
User filter
It can often happen that you do not want to synchronise all users from Microsoft Entra ID to linqi. It often happens that there are many guest users in Entra ID that you may not want to have in linqi. You can create one (or more) user filters for this purpose. Simply add a condition and select, for example, email as the search field, ends with as the operator and @your-domain.com as the comparison value.