1. Open or Create a Configuration

• Log in to the Kuika platform.
• From the Apps screen, open the project you’ll be working on.
• Click the Config Manager module in the top menu.

• To create a new configuration, click the Create a blank configuration card, give the configuration a name, and complete the creation process. If you want to use an existing configuration, click its name in the list.

2. Go to the Authentication & Authorization Settings

• Make sure the App Settings tab is selected at the top of the configuration screen.
• In the left menu, click the Authentication & Authorization option under the Identity & Access heading. You can also quickly access this setting by typing “authentication” into the Search settings field at the top of the menu.
• Click the ADD NEW link under the MSAL dropdown menu. If you want to use a configuration you created earlier, you can select it from the dropdown menu.

3. Fill Out the MSAL Settings Window

In the MSAL Settings window that opens, fill out the following fields:

• Name (required): A descriptive name for the configuration.
• Client ID (required): The client ID of your application registered in the Azure Portal.
• Client Secret (required): The secret key used to authenticate the application.
• Authority: The authentication URL (e.g., https://login.microsoftonline.com/{tenant} or https://login.microsoftonline.com/common/).
• Scopes: The access permissions the application will request (e.g., user.read).
• Keystore Base64: The contents of the keystore file in Base64 format.
• Cache Location: The key that specifies the token cache location.
• Keystore Hash (Android only): The keystore hash value for Android applications only.

• Log in to portal.azure.com.
• Select Entra ID or search for it in the search field.

• Click App registrations and click the New registration button.
• Name the application, make the appropriate selection under Supported Account Types and click Register.

Registering App Information

• Save the Application Client ID and Tenant ID.

• In the Certificates & secrets section, click on the New client secret button.
• Fill in the Description field, select the expiration time and click the Add button.
• Save the resulting Client Secret value.

Configure API Permissions

• Open the API permissions section.

• User.Read is present by default.
• Add the required permissions by clicking the Add a permission button.

• Select Microsoft Graph from the panel on the right and add the required permissions.

After adding permission, the previous screen is returned.

• In the Overview section, click on Add a Redirect URL.
• Click the Add a platform button.

Web Platform

• Click on the Web button.
• In the Redirect URLs field, create a Redirect URL for the web application (e.g. https://platform.kuika.com/msalredirect).
• In the Front-channel logout URL field, create a Logout URL (e.g. https://platform.kuika.com/logout).
• Click the Configure button.

iOS Platform

• Click the iOS button, enter the Bundle IDand click Configure.

Android Platform

• Click the Android button, enter the required information and click the Configure button.

• Open the Configuration Manager module.
• Create a new configuration.
• In the App Settings tab, select the MSAL configuration or create a new setting.
• Enter the required information in the MSAL Setting modal.
• Complete the process by clicking the CREATE button.

After completing these steps, you can perform authentication and access authorized resources using MSAL in your application.