Application setup
-
Register new application in Entra admin center
-
In Certificates & secrets create a new Client secret
-
To use the Entra application NG-SOS needs:
- Directory (tenant) ID
- Application (client) ID
- Client secret
Security groups and App roles
- In order to set up user roles in NG-SOS 2 options can be used from Entra ID - Security Groups and App roles
- You can use only one of these options or mix and match them as needed.
NG-SOS roles
There are 3 supported roles:
- Admin has access to the Admin Portal. They can manage local user accounts, configure associated agencies for incident sharing, and upload checklists.
- Dispatcher has access to the NG-SOS Portal and can view all incidents within their assigned agencies.
- Crew can access shared links for specific incidents—for example, when HEMS requires live video streams or precise location data.
Security groups
-
For Security groups access to groups in token configuration needs to be set up:
- Open Entra Admin center, select App registrations -> All applications and select the application.
- In Token configuration select Add groups claim and select Security groups. Click Save.
-
Open Entra Admin center, select Groups -> All groups
-
Click New group:
- Group type - select Security
- Group name - this is only visible to you
- Click Create
-
To Assign users to security groups:
- Open Entra Admin center, select Groups -> All groups
-
For each group send which NG-SOS role it belongs to and send its Object ID
App roles
-
App roles don't need any special setup in the application (like setting up groups in token configuration for Security groups)
-
Open Entra Admin center, select App registrations -> All applications and select the application.
-
In App roles, click Create app role:
- Display name - this is only visible to you
- Allowed member types - select Users/Groups
- Value - this is the value that will go to NG-SOS
- Description - this is only visible to you
-
To assign App roles to users:
- Open Entra Admin center, select Enterprise apps -> select the application
- In Users and groups select Add user/group. Select Users, select Role. Click Assign.
-
For each app role send which NG-SOS role it belongs to and send its Value