Add a Microsoft Entra ID domain

POST 
/config/entraid-domains

Creates an Entra ID tenant configuration.

The stored document requires name, client_id, tenant_id, client_secret and the domain, user and pass of both scan_config.read_acct and scan_config.write_acct. The client secret is stored encrypted. Returns HTTP 200 with a plain-text confirmation. Accepts JSON or application/x-www-form-urlencoded bodies. Required role: admin or superadmin.

Request

Responses

200

Created.

400

Request validation failed.

401

No token, or the token is invalid or expired. The body is {message}: No auth token provided when no token is sent, otherwise the token check's message (jwt expired, jwt malformed, invalid signature, invalid token, jwt signature is required). Send Authorization: Bearer <token> exactly: the server drops the first seven characters of the header and reads the rest as the token, so a different scheme or an extra space fails. If Authorization is absent, the server reads a token field in the body, then a token query parameter, then x-access-token. Routes that validate query fields reject ?token= with 400 InvalidQuery.

403

The token's role is not allowed for this operation, or the token's scopes exclude the route (Scope not allowed by token).