Configure Anaplan XL Web for Azure data sources

Previously, to use Azure-connected data sources in Anaplan XL Web there was a multi-tenant application that relied on the xlcubed.com domain. This domain is being deprecated. You need to create an App Registration in your Azure tenant and configure Anaplan XL web instances to use it.

You need an Azure administrator with permission to create an App registration to do this.

1. In Microsoft Azure, go to the App registrations screen and select New registration.
2. Configure the basic settings:
   1. Give the App a name that'll be meaningful to your users.
   2. Add a Redirect URI to your instances of Anaplan XL Web. This is the URI of your web server followed by /SSOToken.html.
      For example, if you are using a test instance on your local computer, at http://localhost/xlcubedweb  use http://localhost/xlcubedweb/SSOToken.html.
   3. Select Register.

3. Configure authentication:
   1. Select Manage > Authentication.
   2. Check the box for ID tokens and select Save.
4. Configure Client secret.
   1. Select Manage > Certificates & secrets
   2. Select New client secret
   3. Give the secret a name and choose the expiry date, then select Add.
      If the secret expires, you must create a new secret and update the web configuration to use it.
5. Copy the secret.

4. Configure permissions
   1. Select Manage > API permissions.
      Microsoft Graph is automatically configured for you and shouldn't be changed.
   2. Select Add a permission
   3. Select the permissions you require based on the data source you want to connect to. If you select APIs my organization uses, you can get a searchable list.
      When selecting a permission, choose from the Delegated permissions. These enable data access as the signed-in user so that their permissions are correctly applied. Granting the App registration permission means it can access the data for the user. It won't grant them additional permissions to data they can't normally access.
      Commonly used permissions are:

To configure Anaplan XL Web, you need:

• Application (client) ID. You get this from the App Registration Overview page. Use the Copy to clipboard button to the right of the ID.
• The Redirect URI you added in the App registration.
• The Client secret copied from the App registration.
• The Tenant ID of the Azure tenant. You get this from the Tenant Properties page.

Open the web.config file on your Anaplan XL web server and add these keys to the appSettings region:

  <add key="AzureClientID" value="{your client id}" />

  <add key="AzureClientSecret" value="{your client secret}" />

  <add key="AzureRedirectUrl" value="{your client redirect}" />

  <add key="AzureAuthorityAudience" value="{your tenant id}" />

When a user tries to access data through Anaplan XL web they are prompted to authenticate using SSO with your App registration. It'll then be used to delegate permissions to the data source.

When a user first tries to access an Azure resource, a consent screen is displayed Permissions requested, Anaplan XL Connector.

They must select Accept to permit the data to be accessed on their behalf. Administrators can pre-authorize an application so that users don't see a consent screen. Review https://learn.microsoft.com/en-us/entra/identity-platform/permissions-consent-overview?WT.mc_id=Portal-Microsoft_AAD_RegisteredApps#consent for more information.