Re: Nifi with Microsoft entraID Integration

[Ben .T.George]

HI

Finally, i have achieved EntraID integration,

i would like to map some users and group to nifi, while reading about it, i
saw a place like below where we can add user user or group

[image: image.png]

but i cannot find this in my nifi instance.

Can someone help me to find this out ?

On Wed, 12 Nov 2025 at 12:38, Ben .T.George  wrote:

> HI
>
> One thing i forgot to update, my nifi server is behind corporate proxy
>
> On Tue, 11 Nov 2025 at 14:13, Ben .T.George  wrote:
>
>> HI David,
>>
>> Thanks for the response. i was checking with the one who manages
>> portal/entra ID, response i got is
>>
>> Application is not multi-Tenant
>> and login endpoint is https://login.microsoftonline.com/tenantId (this
>> ID is a random number king of thing)
>>
>>
>>
>> On Mon, 10 Nov 2025 at 18:39, David Reynolds 
>> wrote:
>>
>>> Did you configure the application in Entra as a Multi-Tenant
>>> application? You have the global endpoint (login.microsoftonline.com)
>>> as the authority endpoint - but I would expect this to be
>>> https://login.microsoftonline.com/tenantId - you can validate this in
>>> the App Registration by clicking the Endpoints on the top and looked
>>> at the "Supported Account Types".
>>>
>>> On Mon, Nov 10, 2025 at 2:13 AM Ben .T.George 
>>> wrote:
>>> >
>>> > HI
>>> >
>>> > i saw some blocks in bootstrap logs, saying login.microsoftonline.com
>>> is failed to load
>>> >
>>> > i have opened the proxy, and whitelisted the url related entra, and
>>> export proxy from cli, started nifi again, those errors are not showing
>>> now. i am not sure about the proxy settings is like export or through any
>>> configuration file
>>> >
>>> > please find below authorizers and nifi properties
>>> > authorizers:- Pastebin.com
>>> > nifi.properties :  nifi.flow.configuration - Pastebin.com
>>> >
>>> >
>>> > On Sun, 9 Nov 2025 at 18:33, Ben .T.George 
>>> wrote:
>>> >>
>>> >> Hi David,
>>> >>
>>> >> Thank you for your response.
>>> >>
>>> >> I reviewed the document you provided, Alsoy the GitHub guide for
>>> Azure Active Directory setup by benkelly. However, it seems quite outdated.
>>> I followed the configurations as outlined and have successfully obtained
>>> the tenant ID, client ID, secret, and a password/key from my Entraid team.
>>> >>
>>> >> After implementing these settings, I've also modified the
>>> authorizers.xml file. Once I started NiFi, I noticed the port is listening,
>>> but I'm unable to access the UI; the page isn’t loading, and I’m
>>> experiencing connection timeouts.
>>> >>
>>> >> Previously, with simple authentication, NiFi was functioning
>>> properly, and I could create processes without any issues.
>>> >>
>>> >> Best regards,
>>> >>
>>> >>
>>> >> On Sun, 9 Nov 2025 at 09:54, David Reynolds 
>>> wrote:
>>> >>>
>>> >>> Easily done with either OIDC or SAML. Pick whichever you're
>>> >>> comfortable with or whatever's dictated by your CyberSecurity team.
>>> >>>
>>> >>>
>>> https://nifi.apache.org/docs/nifi-docs/html/administration-guide.html#openid_connect
>>> >>>
>>> >>> On Sat, Nov 8, 2025 at 11:17 PM Ben .T.George 
>>> wrote:
>>> >>> >
>>> >>> > HI All,
>>> >>> >
>>> >>> > wish you a good day.
>>> >>> >
>>> >>> > i would like to know the possibility of integrating Nifi with
>>> Microsoft EntraID for sso/single signon
>>> >>> >
>>> >>> >
>>> >>> > --
>>> >>> > Yours Sincerely
>>> >>> > Ben.T.George
>>> >>> >
>>> >>> > " Live like you will die tomorrow, learn like you will live
>>> forever "
>>> >>
>>> >>
>>> >>
>>> >> --
>>> >> Yours Sincerely
>>> >> Ben.T.George
>>> >>
>>> >> " Live like you will die tomorrow, learn like you will live forever "
>>> >
>>> >
>>> >
>>> > --
>>> > Yours Sincerely
>>> > Ben.T.George
>>> >
>>> > " Live like you will die tomorrow, learn like you will live forever "
>>>
>>
>>
>> --
>> Yours Sincerely
>> Ben.T.George
>>
>> *" Live like you will die tomorrow, learn like you will live forever "*
>>
>
>
> --
> Yours Sincerely
> Ben.T.George
>
> *" Live like you will die tomorrow, learn like you will live forever "*
>


-- 
Yours Sincerely
Ben.T.George

*" Live like you will die tomorrow, learn like you will live forever "*

Re: Nifi with Microsoft entraID Integration

[Ben .T.George]

HI

One thing i forgot to update, my nifi server is behind corporate proxy

On Tue, 11 Nov 2025 at 14:13, Ben .T.George  wrote:

> HI David,
>
> Thanks for the response. i was checking with the one who manages
> portal/entra ID, response i got is
>
> Application is not multi-Tenant
> and login endpoint is https://login.microsoftonline.com/tenantId (this ID
> is a random number king of thing)
>
>
>
> On Mon, 10 Nov 2025 at 18:39, David Reynolds 
> wrote:
>
>> Did you configure the application in Entra as a Multi-Tenant
>> application? You have the global endpoint (login.microsoftonline.com)
>> as the authority endpoint - but I would expect this to be
>> https://login.microsoftonline.com/tenantId - you can validate this in
>> the App Registration by clicking the Endpoints on the top and looked
>> at the "Supported Account Types".
>>
>> On Mon, Nov 10, 2025 at 2:13 AM Ben .T.George 
>> wrote:
>> >
>> > HI
>> >
>> > i saw some blocks in bootstrap logs, saying login.microsoftonline.com
>> is failed to load
>> >
>> > i have opened the proxy, and whitelisted the url related entra, and
>> export proxy from cli, started nifi again, those errors are not showing
>> now. i am not sure about the proxy settings is like export or through any
>> configuration file
>> >
>> > please find below authorizers and nifi properties
>> > authorizers:- Pastebin.com
>> > nifi.properties :  nifi.flow.configuration - Pastebin.com
>> >
>> >
>> > On Sun, 9 Nov 2025 at 18:33, Ben .T.George 
>> wrote:
>> >>
>> >> Hi David,
>> >>
>> >> Thank you for your response.
>> >>
>> >> I reviewed the document you provided, Alsoy the GitHub guide for Azure
>> Active Directory setup by benkelly. However, it seems quite outdated. I
>> followed the configurations as outlined and have successfully obtained the
>> tenant ID, client ID, secret, and a password/key from my Entraid team.
>> >>
>> >> After implementing these settings, I've also modified the
>> authorizers.xml file. Once I started NiFi, I noticed the port is listening,
>> but I'm unable to access the UI; the page isn’t loading, and I’m
>> experiencing connection timeouts.
>> >>
>> >> Previously, with simple authentication, NiFi was functioning properly,
>> and I could create processes without any issues.
>> >>
>> >> Best regards,
>> >>
>> >>
>> >> On Sun, 9 Nov 2025 at 09:54, David Reynolds 
>> wrote:
>> >>>
>> >>> Easily done with either OIDC or SAML. Pick whichever you're
>> >>> comfortable with or whatever's dictated by your CyberSecurity team.
>> >>>
>> >>>
>> https://nifi.apache.org/docs/nifi-docs/html/administration-guide.html#openid_connect
>> >>>
>> >>> On Sat, Nov 8, 2025 at 11:17 PM Ben .T.George 
>> wrote:
>> >>> >
>> >>> > HI All,
>> >>> >
>> >>> > wish you a good day.
>> >>> >
>> >>> > i would like to know the possibility of integrating Nifi with
>> Microsoft EntraID for sso/single signon
>> >>> >
>> >>> >
>> >>> > --
>> >>> > Yours Sincerely
>> >>> > Ben.T.George
>> >>> >
>> >>> > " Live like you will die tomorrow, learn like you will live forever
>> "
>> >>
>> >>
>> >>
>> >> --
>> >> Yours Sincerely
>> >> Ben.T.George
>> >>
>> >> " Live like you will die tomorrow, learn like you will live forever "
>> >
>> >
>> >
>> > --
>> > Yours Sincerely
>> > Ben.T.George
>> >
>> > " Live like you will die tomorrow, learn like you will live forever "
>>
>
>
> --
> Yours Sincerely
> Ben.T.George
>
> *" Live like you will die tomorrow, learn like you will live forever "*
>


-- 
Yours Sincerely
Ben.T.George

*" Live like you will die tomorrow, learn like you will live forever "*

Re: Nifi with Microsoft entraID Integration

[Ben .T.George]

HI David,

Thanks for the response. i was checking with the one who manages
portal/entra ID, response i got is

Application is not multi-Tenant
and login endpoint is https://login.microsoftonline.com/tenantId (this ID
is a random number king of thing)



On Mon, 10 Nov 2025 at 18:39, David Reynolds 
wrote:

> Did you configure the application in Entra as a Multi-Tenant
> application? You have the global endpoint (login.microsoftonline.com)
> as the authority endpoint - but I would expect this to be
> https://login.microsoftonline.com/tenantId - you can validate this in
> the App Registration by clicking the Endpoints on the top and looked
> at the "Supported Account Types".
>
> On Mon, Nov 10, 2025 at 2:13 AM Ben .T.George 
> wrote:
> >
> > HI
> >
> > i saw some blocks in bootstrap logs, saying login.microsoftonline.com
> is failed to load
> >
> > i have opened the proxy, and whitelisted the url related entra, and
> export proxy from cli, started nifi again, those errors are not showing
> now. i am not sure about the proxy settings is like export or through any
> configuration file
> >
> > please find below authorizers and nifi properties
> > authorizers:- Pastebin.com
> > nifi.properties :  nifi.flow.configuration - Pastebin.com
> >
> >
> > On Sun, 9 Nov 2025 at 18:33, Ben .T.George 
> wrote:
> >>
> >> Hi David,
> >>
> >> Thank you for your response.
> >>
> >> I reviewed the document you provided, Alsoy the GitHub guide for Azure
> Active Directory setup by benkelly. However, it seems quite outdated. I
> followed the configurations as outlined and have successfully obtained the
> tenant ID, client ID, secret, and a password/key from my Entraid team.
> >>
> >> After implementing these settings, I've also modified the
> authorizers.xml file. Once I started NiFi, I noticed the port is listening,
> but I'm unable to access the UI; the page isn’t loading, and I’m
> experiencing connection timeouts.
> >>
> >> Previously, with simple authentication, NiFi was functioning properly,
> and I could create processes without any issues.
> >>
> >> Best regards,
> >>
> >>
> >> On Sun, 9 Nov 2025 at 09:54, David Reynolds 
> wrote:
> >>>
> >>> Easily done with either OIDC or SAML. Pick whichever you're
> >>> comfortable with or whatever's dictated by your CyberSecurity team.
> >>>
> >>>
> https://nifi.apache.org/docs/nifi-docs/html/administration-guide.html#openid_connect
> >>>
> >>> On Sat, Nov 8, 2025 at 11:17 PM Ben .T.George 
> wrote:
> >>> >
> >>> > HI All,
> >>> >
> >>> > wish you a good day.
> >>> >
> >>> > i would like to know the possibility of integrating Nifi with
> Microsoft EntraID for sso/single signon
> >>> >
> >>> >
> >>> > --
> >>> > Yours Sincerely
> >>> > Ben.T.George
> >>> >
> >>> > " Live like you will die tomorrow, learn like you will live forever "
> >>
> >>
> >>
> >> --
> >> Yours Sincerely
> >> Ben.T.George
> >>
> >> " Live like you will die tomorrow, learn like you will live forever "
> >
> >
> >
> > --
> > Yours Sincerely
> > Ben.T.George
> >
> > " Live like you will die tomorrow, learn like you will live forever "
>


-- 
Yours Sincerely
Ben.T.George

*" Live like you will die tomorrow, learn like you will live forever "*

Re: Nifi with Microsoft entraID Integration

[David Reynolds]

Did you configure the application in Entra as a Multi-Tenant
application? You have the global endpoint (login.microsoftonline.com)
as the authority endpoint - but I would expect this to be
https://login.microsoftonline.com/tenantId - you can validate this in
the App Registration by clicking the Endpoints on the top and looked
at the "Supported Account Types".

On Mon, Nov 10, 2025 at 2:13 AM Ben .T.George  wrote:
>
> HI
>
> i saw some blocks in bootstrap logs, saying login.microsoftonline.com is 
> failed to load
>
> i have opened the proxy, and whitelisted the url related entra, and export 
> proxy from cli, started nifi again, those errors are not showing now. i am 
> not sure about the proxy settings is like export or through any configuration 
> file
>
> please find below authorizers and nifi properties
> authorizers:- Pastebin.com
> nifi.properties :  nifi.flow.configuration - Pastebin.com
>
>
> On Sun, 9 Nov 2025 at 18:33, Ben .T.George  wrote:
>>
>> Hi David,
>>
>> Thank you for your response.
>>
>> I reviewed the document you provided, Alsoy the GitHub guide for Azure 
>> Active Directory setup by benkelly. However, it seems quite outdated. I 
>> followed the configurations as outlined and have successfully obtained the 
>> tenant ID, client ID, secret, and a password/key from my Entraid team.
>>
>> After implementing these settings, I've also modified the authorizers.xml 
>> file. Once I started NiFi, I noticed the port is listening, but I'm unable 
>> to access the UI; the page isn’t loading, and I’m experiencing connection 
>> timeouts.
>>
>> Previously, with simple authentication, NiFi was functioning properly, and I 
>> could create processes without any issues.
>>
>> Best regards,
>>
>>
>> On Sun, 9 Nov 2025 at 09:54, David Reynolds  wrote:
>>>
>>> Easily done with either OIDC or SAML. Pick whichever you're
>>> comfortable with or whatever's dictated by your CyberSecurity team.
>>>
>>> https://nifi.apache.org/docs/nifi-docs/html/administration-guide.html#openid_connect
>>>
>>> On Sat, Nov 8, 2025 at 11:17 PM Ben .T.George  wrote:
>>> >
>>> > HI All,
>>> >
>>> > wish you a good day.
>>> >
>>> > i would like to know the possibility of integrating Nifi with Microsoft 
>>> > EntraID for sso/single signon
>>> >
>>> >
>>> > --
>>> > Yours Sincerely
>>> > Ben.T.George
>>> >
>>> > " Live like you will die tomorrow, learn like you will live forever "
>>
>>
>>
>> --
>> Yours Sincerely
>> Ben.T.George
>>
>> " Live like you will die tomorrow, learn like you will live forever "
>
>
>
> --
> Yours Sincerely
> Ben.T.George
>
> " Live like you will die tomorrow, learn like you will live forever "

Re: Nifi with Microsoft entraID Integration

[Ben .T.George]

HI

i saw some blocks in bootstrap logs, saying login.microsoftonline.com is
failed to load

i have opened the proxy, and whitelisted the url related entra, and export
proxy from cli, started nifi again, those errors are not showing now. i am
not sure about the proxy settings is like export or through any
configuration file

please find below authorizers and nifi properties
authorizers:- Pastebin.com 
nifi.properties :  nifi.flow.configuration - Pastebin.com



On Sun, 9 Nov 2025 at 18:33, Ben .T.George  wrote:

> Hi David,
>
> Thank you for your response.
>
> I reviewed the document you provided, Alsoy the GitHub guide for Azure
> Active Directory setup by benkelly.
> 
> However, it seems quite outdated. I followed the configurations as outlined
> and have successfully obtained the tenant ID, client ID, secret, and a
> password/key from my Entraid team.
>
> After implementing these settings, I've also modified the authorizers.xml
> file. Once I started NiFi, I noticed the port is listening, but I'm unable
> to access the UI; the page isn’t loading, and I’m experiencing connection
> timeouts.
>
> Previously, with simple authentication, NiFi was functioning properly, and
> I could create processes without any issues.
>
> Best regards,
>
>
> On Sun, 9 Nov 2025 at 09:54, David Reynolds 
> wrote:
>
>> Easily done with either OIDC or SAML. Pick whichever you're
>> comfortable with or whatever's dictated by your CyberSecurity team.
>>
>>
>> https://nifi.apache.org/docs/nifi-docs/html/administration-guide.html#openid_connect
>>
>> On Sat, Nov 8, 2025 at 11:17 PM Ben .T.George 
>> wrote:
>> >
>> > HI All,
>> >
>> > wish you a good day.
>> >
>> > i would like to know the possibility of integrating Nifi with Microsoft
>> EntraID for sso/single signon
>> >
>> >
>> > --
>> > Yours Sincerely
>> > Ben.T.George
>> >
>> > " Live like you will die tomorrow, learn like you will live forever "
>>
>
>
> --
> Yours Sincerely
> Ben.T.George
>
> *" Live like you will die tomorrow, learn like you will live forever "*
>


-- 
Yours Sincerely
Ben.T.George

*" Live like you will die tomorrow, learn like you will live forever "*

Re: Nifi with Microsoft entraID Integration

[Ben .T.George]

Hi David,

Thank you for your response.

I reviewed the document you provided, Alsoy the GitHub guide for Azure
Active Directory setup by benkelly.

However, it seems quite outdated. I followed the configurations as outlined
and have successfully obtained the tenant ID, client ID, secret, and a
password/key from my Entraid team.

After implementing these settings, I've also modified the authorizers.xml
file. Once I started NiFi, I noticed the port is listening, but I'm unable
to access the UI; the page isn’t loading, and I’m experiencing connection
timeouts.

Previously, with simple authentication, NiFi was functioning properly, and
I could create processes without any issues.

Best regards,


On Sun, 9 Nov 2025 at 09:54, David Reynolds  wrote:

> Easily done with either OIDC or SAML. Pick whichever you're
> comfortable with or whatever's dictated by your CyberSecurity team.
>
>
> https://nifi.apache.org/docs/nifi-docs/html/administration-guide.html#openid_connect
>
> On Sat, Nov 8, 2025 at 11:17 PM Ben .T.George 
> wrote:
> >
> > HI All,
> >
> > wish you a good day.
> >
> > i would like to know the possibility of integrating Nifi with Microsoft
> EntraID for sso/single signon
> >
> >
> > --
> > Yours Sincerely
> > Ben.T.George
> >
> > " Live like you will die tomorrow, learn like you will live forever "
>


-- 
Yours Sincerely
Ben.T.George

*" Live like you will die tomorrow, learn like you will live forever "*

Re: Nifi with Microsoft entraID Integration

[David Reynolds]

Easily done with either OIDC or SAML. Pick whichever you're
comfortable with or whatever's dictated by your CyberSecurity team.

https://nifi.apache.org/docs/nifi-docs/html/administration-guide.html#openid_connect

On Sat, Nov 8, 2025 at 11:17 PM Ben .T.George  wrote:
>
> HI All,
>
> wish you a good day.
>
> i would like to know the possibility of integrating Nifi with Microsoft 
> EntraID for sso/single signon
>
>
> --
> Yours Sincerely
> Ben.T.George
>
> " Live like you will die tomorrow, learn like you will live forever "