[{"data":1,"prerenderedAt":1335},["ShallowReactive",2],{"navigation_docs_de":3,"-de-sign-in-and-directories-microsoft-entra-id":427,"-de-sign-in-and-directories-microsoft-entra-id-surround":1330},[4,31,117,188,238,271,310,369,378],{"title":5,"icon":6,"path":7,"stem":8,"children":9,"page":30},"Erste Schritte","i-hugeicons-rocket-01","\u002Fde\u002Fgetting-started","de\u002F01.getting-started",[10,15,20,25],{"title":11,"path":12,"stem":13,"icon":14},"Was ist DDM?","\u002Fde\u002Fgetting-started\u002Fwhat-is-ddm","de\u002F01.getting-started\u002F01.what-is-ddm","i-hugeicons-information-circle",{"title":16,"path":17,"stem":18,"icon":19},"Konto und Anmeldung","\u002Fde\u002Fgetting-started\u002Fsign-in","de\u002F01.getting-started\u002F02.sign-in","i-hugeicons-key-01",{"title":21,"path":22,"stem":23,"icon":24},"KI in DDM","\u002Fde\u002Fgetting-started\u002Fai-in-ddm","de\u002F01.getting-started\u002F03.ai-in-ddm","i-hugeicons-ai-magic",{"title":26,"path":27,"stem":28,"icon":29},"Systemstatus","\u002Fde\u002Fgetting-started\u002Fsystem-status","de\u002F01.getting-started\u002F04.system-status","i-hugeicons-activity-03",false,{"title":32,"icon":33,"path":34,"stem":35,"children":36,"page":30},"CMS","i-hugeicons-dashboard-square-01","\u002Fde\u002Fcms","de\u002F02.cms",[37,42,47,52,57,62,67,72,77,82,87,92,97,102,107,112],{"title":38,"path":39,"stem":40,"icon":41},"Das CMS im Überblick","\u002Fde\u002Fcms\u002Foverview","de\u002F02.cms\u002F01.overview","i-hugeicons-compass-01",{"title":43,"path":44,"stem":45,"icon":46},"Dokumente hochladen","\u002Fde\u002Fcms\u002Fupload","de\u002F02.cms\u002F02.upload","i-hugeicons-upload-01",{"title":48,"path":49,"stem":50,"icon":51},"Kategorien","\u002Fde\u002Fcms\u002Fcategories","de\u002F02.cms\u002F03.categories","i-hugeicons-folder-tree",{"title":53,"path":54,"stem":55,"icon":56},"Dokumente bearbeiten","\u002Fde\u002Fcms\u002Fdocuments","de\u002F02.cms\u002F04.documents","i-hugeicons-file-edit",{"title":58,"path":59,"stem":60,"icon":61},"Suchen und filtern","\u002Fde\u002Fcms\u002Fsearch-and-filters","de\u002F02.cms\u002F05.search-and-filters","i-hugeicons-search-01",{"title":63,"path":64,"stem":65,"icon":66},"Gruppen und Rechte","\u002Fde\u002Fcms\u002Fgroups-and-permissions","de\u002F02.cms\u002F06.groups-and-permissions","i-hugeicons-user-multiple",{"title":68,"path":69,"stem":70,"icon":71},"Benutzer","\u002Fde\u002Fcms\u002Fusers","de\u002F02.cms\u002F07.users","i-hugeicons-user-add-01",{"title":73,"path":74,"stem":75,"icon":76},"Freigaben","\u002Fde\u002Fcms\u002Fapprovals","de\u002F02.cms\u002F08.approvals","i-hugeicons-checkmark-badge-01",{"title":78,"path":79,"stem":80,"icon":81},"Märkte und Übersetzungen","\u002Fde\u002Fcms\u002Fmarkets-and-translations","de\u002F02.cms\u002F09.markets-and-translations","i-hugeicons-globe-02",{"title":83,"path":84,"stem":85,"icon":86},"Notizvorlagen","\u002Fde\u002Fcms\u002Fnote-templates","de\u002F02.cms\u002F10.note-templates","i-hugeicons-layout-01",{"title":88,"path":89,"stem":90,"icon":91},"Nutzung und Audit-Log","\u002Fde\u002Fcms\u002Fusage-and-audit","de\u002F02.cms\u002F11.usage-and-audit","i-hugeicons-chart-column",{"title":93,"path":94,"stem":95,"icon":96},"KI-Assistent","\u002Fde\u002Fcms\u002Fassistant","de\u002F02.cms\u002F12.assistant","i-hugeicons-sparkles",{"title":98,"path":99,"stem":100,"icon":101},"Einstellungen","\u002Fde\u002Fcms\u002Fsettings","de\u002F02.cms\u002F13.settings","i-hugeicons-settings-02",{"title":103,"path":104,"stem":105,"icon":106},"Tarife","\u002Fde\u002Fcms\u002Fplans","de\u002F02.cms\u002F14.plans","i-hugeicons-package",{"title":108,"path":109,"stem":110,"icon":111},"Feature-Wünsche","\u002Fde\u002Fcms\u002Ffeature-requests","de\u002F02.cms\u002F15.feature-requests","i-hugeicons-idea-01",{"title":113,"path":114,"stem":115,"icon":116},"Fehler melden","\u002Fde\u002Fcms\u002Fbug-reports","de\u002F02.cms\u002F16.bug-reports","i-hugeicons-bug-01",{"title":118,"icon":119,"path":120,"stem":121,"children":122,"page":30},"App","i-hugeicons-smart-phone-01","\u002Fde\u002Fapp","de\u002F03.app",[123,128,133,138,143,147,152,157,162,167,170,173,176,179,184],{"title":124,"path":125,"stem":126,"icon":127},"Anmelden und zurechtfinden","\u002Fde\u002Fapp\u002Foverview","de\u002F03.app\u002F01.overview","i-hugeicons-login-03",{"title":129,"path":130,"stem":131,"icon":132},"Tabs und geteilte Ansicht","\u002Fde\u002Fapp\u002Ftabs","de\u002F03.app\u002F02.tabs","i-hugeicons-layout-2-column",{"title":134,"path":135,"stem":136,"icon":137},"Dokumente finden und lesen","\u002Fde\u002Fapp\u002Fdocuments","de\u002F03.app\u002F03.documents","i-hugeicons-file-01",{"title":139,"path":140,"stem":141,"icon":142},"Favoriten","\u002Fde\u002Fapp\u002Ffavorites","de\u002F03.app\u002F04.favorites","i-hugeicons-favourite",{"title":144,"path":145,"stem":146,"icon":61},"Suchen","\u002Fde\u002Fapp\u002Fsearch","de\u002F03.app\u002F05.search",{"title":148,"path":149,"stem":150,"icon":151},"Notizen","\u002Fde\u002Fapp\u002Fnotes","de\u002F03.app\u002F06.notes","i-hugeicons-note-edit",{"title":153,"path":154,"stem":155,"icon":156},"Kalender und Termine","\u002Fde\u002Fapp\u002Fcalendar","de\u002F03.app\u002F07.calendar","i-hugeicons-calendar-03",{"title":158,"path":159,"stem":160,"icon":161},"An Kunden senden","\u002Fde\u002Fapp\u002Foutbox","de\u002F03.app\u002F08.outbox","i-hugeicons-sent",{"title":163,"path":164,"stem":165,"icon":166},"Offline arbeiten","\u002Fde\u002Fapp\u002Foffline","de\u002F03.app\u002F09.offline","i-hugeicons-wifi-off-01",{"title":93,"path":168,"stem":169,"icon":96},"\u002Fde\u002Fapp\u002Fassistant","de\u002F03.app\u002F10.assistant",{"title":98,"path":171,"stem":172,"icon":101},"\u002Fde\u002Fapp\u002Fsettings","de\u002F03.app\u002F11.settings",{"title":108,"path":174,"stem":175,"icon":111},"\u002Fde\u002Fapp\u002Ffeature-requests","de\u002F03.app\u002F12.feature-requests",{"title":113,"path":177,"stem":178,"icon":116},"\u002Fde\u002Fapp\u002Fbug-reports","de\u002F03.app\u002F13.bug-reports",{"title":180,"path":181,"stem":182,"icon":183},"Desktop-App","\u002Fde\u002Fapp\u002Fdesktop-app","de\u002F03.app\u002F14.desktop-app","i-hugeicons-computer",{"title":185,"path":186,"stem":187,"icon":119},"Mobile App","\u002Fde\u002Fapp\u002Fmobile-app","de\u002F03.app\u002F15.mobile-app",{"title":189,"icon":190,"path":191,"stem":192,"children":193,"page":30},"Anmeldung & Verzeichnisse","i-hugeicons-security-check","\u002Fde\u002Fsign-in-and-directories","de\u002F04.sign-in-and-directories",[194,198,202,207,212,217,222,226,230,234],{"title":195,"path":196,"stem":197,"icon":19},"Anmeldeverfahren","\u002Fde\u002Fsign-in-and-directories\u002Fsign-in-methods","de\u002F04.sign-in-and-directories\u002F01.sign-in-methods",{"title":199,"path":200,"stem":201,"icon":190},"Single Sign-on","\u002Fde\u002Fsign-in-and-directories\u002Fsingle-sign-on","de\u002F04.sign-in-and-directories\u002F02.single-sign-on",{"title":203,"path":204,"stem":205,"icon":206},"Verzeichnisdienste (LDAP)","\u002Fde\u002Fsign-in-and-directories\u002Fdirectory-services","de\u002F04.sign-in-and-directories\u002F03.directory-services","i-hugeicons-hierarchy",{"title":208,"path":209,"stem":210,"icon":211},"Abgleich und Anmeldung","\u002Fde\u002Fsign-in-and-directories\u002Fdirectory-sync","de\u002F04.sign-in-and-directories\u002F04.directory-sync","i-hugeicons-refresh",{"title":213,"path":214,"stem":215,"icon":216},"Microsoft Entra ID","\u002Fde\u002Fsign-in-and-directories\u002Fmicrosoft-entra-id","de\u002F04.sign-in-and-directories\u002F05.microsoft-entra-id","i-hugeicons-building-03",{"title":218,"path":219,"stem":220,"icon":221},"Okta","\u002Fde\u002Fsign-in-and-directories\u002Fokta","de\u002F04.sign-in-and-directories\u002F06.okta","i-hugeicons-finger-print",{"title":223,"path":224,"stem":225,"icon":81},"Google Workspace","\u002Fde\u002Fsign-in-and-directories\u002Fgoogle-workspace","de\u002F04.sign-in-and-directories\u002F07.google-workspace",{"title":227,"path":228,"stem":229,"icon":119},"Zwei-Faktor-Authentifizierung","\u002Fde\u002Fsign-in-and-directories\u002Ftwo-factor-authentication","de\u002F04.sign-in-and-directories\u002F08.two-factor-authentication",{"title":231,"path":232,"stem":233,"icon":221},"Passkeys","\u002Fde\u002Fsign-in-and-directories\u002Fpasskeys","de\u002F04.sign-in-and-directories\u002F09.passkeys",{"title":235,"path":236,"stem":237,"icon":156},"Kalender-Freigabe","\u002Fde\u002Fsign-in-and-directories\u002Fcalendar-access","de\u002F04.sign-in-and-directories\u002F10.calendar-access",{"title":239,"icon":240,"path":241,"stem":242,"children":243,"page":30},"MCP-Server","i-hugeicons-ai-network","\u002Fde\u002Fmcp-server","de\u002F05.mcp-server",[244,248,253,257,262,266],{"title":245,"path":246,"stem":247,"icon":240},"Überblick","\u002Fde\u002Fmcp-server\u002Foverview","de\u002F05.mcp-server\u002F01.overview",{"title":249,"path":250,"stem":251,"icon":252},"Einrichten","\u002Fde\u002Fmcp-server\u002Fsetup","de\u002F05.mcp-server\u002F02.setup","i-hugeicons-plug-socket",{"title":254,"path":255,"stem":256,"icon":111},"Was Sie damit tun können","\u002Fde\u002Fmcp-server\u002Fuse-cases","de\u002F05.mcp-server\u002F03.use-cases",{"title":258,"path":259,"stem":260,"icon":261},"Werkzeuge","\u002Fde\u002Fmcp-server\u002Ftools","de\u002F05.mcp-server\u002F04.tools","i-hugeicons-wrench-01",{"title":263,"path":264,"stem":265,"icon":76},"Änderungen freigeben","\u002Fde\u002Fmcp-server\u002Fapproving-changes","de\u002F05.mcp-server\u002F05.approving-changes",{"title":267,"path":268,"stem":269,"icon":270},"Verwaltung & Sicherheit","\u002Fde\u002Fmcp-server\u002Fadmin-and-security","de\u002F05.mcp-server\u002F06.admin-and-security","i-hugeicons-shield-key",{"title":272,"icon":273,"path":274,"stem":275,"children":276,"page":30},"Externe Quellen","i-hugeicons-database-sync","\u002Fde\u002Fexternal-sources","de\u002F06.external-sources",[277,280,285,290,295,300,305],{"title":245,"path":278,"stem":279,"icon":273},"\u002Fde\u002Fexternal-sources\u002Foverview","de\u002F06.external-sources\u002F01.overview",{"title":281,"path":282,"stem":283,"icon":284},"SharePoint","\u002Fde\u002Fexternal-sources\u002Fsharepoint","de\u002F06.external-sources\u002F02.sharepoint","i-hugeicons-microsoft",{"title":286,"path":287,"stem":288,"icon":289},"OneDrive","\u002Fde\u002Fexternal-sources\u002Fonedrive","de\u002F06.external-sources\u002F03.onedrive","i-hugeicons-folder-cloud",{"title":291,"path":292,"stem":293,"icon":294},"Google Drive","\u002Fde\u002Fexternal-sources\u002Fgoogle-drive","de\u002F06.external-sources\u002F04.google-drive","i-hugeicons-google-drive",{"title":296,"path":297,"stem":298,"icon":299},"FTP \u002F SFTP","\u002Fde\u002Fexternal-sources\u002Fftp-sftp","de\u002F06.external-sources\u002F05.ftp-sftp","i-hugeicons-server-stack-01",{"title":301,"path":302,"stem":303,"icon":304},"REST-Schnittstelle","\u002Fde\u002Fexternal-sources\u002Frest","de\u002F06.external-sources\u002F06.rest","i-hugeicons-api",{"title":306,"path":307,"stem":308,"icon":309},"SOAP-Schnittstelle","\u002Fde\u002Fexternal-sources\u002Fsoap","de\u002F06.external-sources\u002F07.soap","i-hugeicons-source-code",{"title":311,"icon":304,"path":312,"stem":313,"children":314,"page":30},"Integrations-API","\u002Fde\u002Fintegration-api","de\u002F07.integration-api",[315,318,322,327,332,337,341,346,350,354,359,364],{"title":245,"path":316,"stem":317,"icon":14},"\u002Fde\u002Fintegration-api\u002Foverview","de\u002F07.integration-api\u002F01.overview",{"title":319,"path":320,"stem":321,"icon":19},"Authentifizierung","\u002Fde\u002Fintegration-api\u002Fauthentication","de\u002F07.integration-api\u002F02.authentication",{"title":323,"path":324,"stem":325,"icon":326},"Konventionen","\u002Fde\u002Fintegration-api\u002Fconventions","de\u002F07.integration-api\u002F03.conventions","i-hugeicons-book-open-01",{"title":328,"path":329,"stem":330,"icon":331},"Dokumente einspielen","\u002Fde\u002Fintegration-api\u002Fpushing-documents","de\u002F07.integration-api\u002F04.pushing-documents","i-hugeicons-upload-02",{"title":333,"path":334,"stem":335,"icon":336},"Inhalte abrufen","\u002Fde\u002Fintegration-api\u002Fconsuming-content","de\u002F07.integration-api\u002F05.consuming-content","i-hugeicons-download-02",{"title":338,"path":339,"stem":340,"icon":137},"Referenz: Dokumente","\u002Fde\u002Fintegration-api\u002Freference-documents","de\u002F07.integration-api\u002F06.reference-documents",{"title":342,"path":343,"stem":344,"icon":345},"Referenz: Kategorien, Schlagwörter, Märkte","\u002Fde\u002Fintegration-api\u002Freference-categories-tags","de\u002F07.integration-api\u002F07.reference-categories-tags","i-hugeicons-folder-01",{"title":347,"path":348,"stem":349,"icon":211},"Referenz: Abgleich-Manifest","\u002Fde\u002Fintegration-api\u002Freference-sync","de\u002F07.integration-api\u002F08.reference-sync",{"title":351,"path":352,"stem":353,"icon":309},"OpenAPI","\u002Fde\u002Fintegration-api\u002Fopenapi","de\u002F07.integration-api\u002F09.openapi",{"title":355,"path":356,"stem":357,"icon":358},"Änderungsprotokoll","\u002Fde\u002Fintegration-api\u002Fchangelog","de\u002F07.integration-api\u002F10.changelog","i-hugeicons-time-schedule",{"title":360,"path":361,"stem":362,"icon":363},"Referenz: Gruppen, Märkte, Zugriff","\u002Fde\u002Fintegration-api\u002Freference-groups-access","de\u002F07.integration-api\u002F11.reference-groups-access","i-hugeicons-user-lock-01",{"title":365,"path":366,"stem":367,"icon":368},"Umstieg von CMWS","\u002Fde\u002Fintegration-api\u002Fcmws","de\u002F07.integration-api\u002F12.cmws","i-hugeicons-arrow-reload-horizontal",{"title":370,"icon":371,"path":372,"stem":373,"children":374,"page":30},"Neuigkeiten","i-hugeicons-gift","\u002Fde\u002Fwhats-new","de\u002F08.whats-new",[375],{"title":355,"path":376,"stem":377,"icon":358},"\u002Fde\u002Fwhats-new\u002Fchangelog","de\u002F08.whats-new\u002F01.changelog",{"title":379,"icon":299,"path":380,"stem":381,"children":382,"page":30},"Selbst betreiben","\u002Fde\u002Fself-hosting","de\u002F09.self-hosting",[383,386,390,395,399,404,408,413,418,422],{"title":245,"path":384,"stem":385,"icon":14},"\u002Fde\u002Fself-hosting\u002Foverview","de\u002F09.self-hosting\u002F01.overview",{"title":387,"path":388,"stem":389,"icon":106},"Docker Compose","\u002Fde\u002Fself-hosting\u002Fdocker-compose","de\u002F09.self-hosting\u002F02.docker-compose",{"title":391,"path":392,"stem":393,"icon":394},"Kubernetes","\u002Fde\u002Fself-hosting\u002Fkubernetes","de\u002F09.self-hosting\u002F03.kubernetes","i-hugeicons-cloud",{"title":396,"path":397,"stem":398,"icon":101},"Konfiguration","\u002Fde\u002Fself-hosting\u002Fconfiguration","de\u002F09.self-hosting\u002F04.configuration",{"title":400,"path":401,"stem":402,"icon":403},"Lizenz","\u002Fde\u002Fself-hosting\u002Flicence","de\u002F09.self-hosting\u002F05.licence","i-hugeicons-license",{"title":405,"path":406,"stem":407,"icon":211},"Updates","\u002Fde\u002Fself-hosting\u002Fupdates","de\u002F09.self-hosting\u002F06.updates",{"title":409,"path":410,"stem":411,"icon":412},"Postgres","\u002Fde\u002Fself-hosting\u002Fpostgres","de\u002F09.self-hosting\u002F07.postgres","i-hugeicons-database",{"title":414,"path":415,"stem":416,"icon":417},"Sicherung","\u002Fde\u002Fself-hosting\u002Fbackups","de\u002F09.self-hosting\u002F08.backups","i-hugeicons-database-restore",{"title":419,"path":420,"stem":421,"icon":261},"Fehlerbehebung","\u002Fde\u002Fself-hosting\u002Ftroubleshooting","de\u002F09.self-hosting\u002F09.troubleshooting",{"title":423,"path":424,"stem":425,"icon":426},"Firewall","\u002Fde\u002Fself-hosting\u002Ffirewall","de\u002F09.self-hosting\u002F10.firewall","i-hugeicons-firewall",{"id":428,"title":213,"body":429,"description":1323,"extension":1324,"links":1325,"meta":1326,"navigation":1327,"path":214,"seo":1328,"stem":215,"__hash__":1329},"docs_de\u002Fde\u002F04.sign-in-and-directories\u002F05.microsoft-entra-id.md",{"type":430,"value":431,"toc":1304},"minimark",[432,441,454,465,470,576,580,608,619,623,659,676,700,704,715,799,816,830,834,860,866,870,873,926,932,936,943,971,977,981,984,1091,1097,1101,1275,1279],[433,434,435,436,440],"p",{},"Mit Entra ID (früher ",[437,438,439],"strong",{},"Azure Active Directory",") melden sich Ihre Leute mit dem Microsoft-Konto an, das sie für Outlook und Teams nutzen – samt Mehrfaktor-Authentifizierung und bedingtem Zugriff Ihrer Firma.",[433,442,443,444,447,448,450,451,453],{},"Sie registrieren DDM ",[437,445,446],{},"in Ihrem eigenen Entra-Mandanten"," und tragen das Ergebnis in DDM unter ",[437,449,98],{}," › ",[437,452,199],{}," ein. Niemand sonst ist beteiligt, und kein Mandant einer anderen Firma kann sich in Ihre Organisation anmelden.",[433,455,456,457,460,461,464],{},"Sie brauchen ein Konto, das in Entra ID Anwendungen registrieren darf – z. B. ",[437,458,459],{},"Anwendungsentwickler"," oder ",[437,462,463],{},"Cloudanwendungsadministrator"," – und für die Zustimmung in Schritt 3 einen Administrator.",[466,467,469],"h2",{"id":468},"_1-ddm-registrieren","1. DDM registrieren",[471,472,474,479,500,504,527,531,545,555,559],"steps",{"level":473},"3",[475,476,478],"h3",{"id":477},"app-registrierungen-öffnen","App-Registrierungen öffnen",[433,480,481,482,489,490,450,493,450,496,499],{},"Im ",[483,484,488],"a",{"href":485,"rel":486},"https:\u002F\u002Fentra.microsoft.com",[487],"nofollow","Microsoft Entra Admin Center"," unter ",[437,491,492],{},"Entra ID",[437,494,495],{},"App-Registrierungen",[437,497,498],{},"Neue Registrierung",".",[475,501,503],{"id":502},"name-und-kontotypen","Name und Kontotypen",[505,506,507,519],"ul",{},[508,509,510,513,514,518],"li",{},[437,511,512],{},"Name:"," ",[515,516,517],"code",{},"DDM"," – Ihre Leute sehen ihn unter Umständen beim ersten Anmelden.",[508,520,521,513,524,499],{},[437,522,523],{},"Unterstützte Kontotypen:",[437,525,526],{},"Nur Konten in diesem Organisationsverzeichnis (Einzelner Mandant)",[475,528,530],{"id":529},"umleitungs-uri","Umleitungs-URI",[433,532,533,534,537,538,450,540,450,542,544],{},"Plattform ",[437,535,536],{},"Web",". Kopieren Sie die Adresse aus DDM, ",[437,539,98],{},[437,541,199],{},[437,543,530],{}," – sie sieht etwa so aus:",[546,547,553],"pre",{"className":548,"code":550,"language":551,"meta":552},[549],"language-text","https:\u002F\u002Fcms.documentdistributionmanager.com\u002Fapi\u002Fauth\u002Fsso\u002Fcallback\n","text","",[515,554,550],{"__ignoreMap":552},[475,556,558],{"id":557},"registrieren","Registrieren",[433,560,561,562,564,565,568,569,572,573,499],{},"Klicken Sie auf ",[437,563,558],{},". Notieren Sie auf der ",[437,566,567],{},"Übersicht"," zwei Werte: die ",[437,570,571],{},"Anwendungs-ID (Client)"," und die ",[437,574,575],{},"Verzeichnis-ID (Mandant)",[466,577,579],{"id":578},"_2-geheimen-clientschlüssel-anlegen","2. Geheimen Clientschlüssel anlegen",[581,582,583,595,601],"ol",{},[508,584,585,586,450,589,450,592,499],{},"Öffnen Sie ",[437,587,588],{},"Zertifikate & Geheimnisse",[437,590,591],{},"Geheime Clientschlüssel",[437,593,594],{},"Neuer geheimer Clientschlüssel",[508,596,597,598,600],{},"Geben Sie eine Beschreibung ein (z. B. ",[515,599,517],{},") und wählen Sie die Gültigkeit – höchstens 24 Monate.",[508,602,603,604,607],{},"Kopieren Sie sofort den ",[437,605,606],{},"Wert",". Er wird nur einmal angezeigt.",[609,610,611,612,614,615,618],"warning",{},"Kopieren Sie den ",[437,613,606],{},", nicht die ",[437,616,617],{},"Geheimnis-ID",". Und tragen Sie sich das Ablaufdatum in den Kalender ein: Läuft der Schlüssel ab, kann sich niemand mehr mit Entra ID anmelden, bis Sie einen neuen anlegen und in DDM eintragen.",[466,620,622],{"id":621},"_3-berechtigungen-und-der-e-mail-anspruch","3. Berechtigungen und der E-Mail-Anspruch",[433,624,625,628,629,632,633,636,637,640,641,644,645,450,648,450,651,654,655,658],{},[437,626,627],{},"API-Berechtigungen"," – die App braucht die delegierten Microsoft-Graph-Berechtigungen ",[515,630,631],{},"openid",", ",[515,634,635],{},"email"," und ",[515,638,639],{},"profile"," (",[515,642,643],{},"User.Read"," ist schon da und darf bleiben). Klicken Sie auf ",[437,646,647],{},"Berechtigung hinzufügen",[437,649,650],{},"Microsoft Graph",[437,652,653],{},"Delegierte Berechtigungen",", haken Sie die drei an und dann ",[437,656,657],{},"Administratorzustimmung für … erteilen"," – damit Ihre Leute nicht selbst gefragt werden.",[433,660,661,664,665,668,669,672,673,675],{},[437,662,663],{},"Tokenkonfiguration"," – klicken Sie auf ",[437,666,667],{},"Optionalen Anspruch hinzufügen",", Tokentyp ",[437,670,671],{},"ID",", und haken Sie ",[515,674,635],{}," an. Dann schickt Entra ID die E-Mail-Adresse Ihrer Leute mit, die DDM mit Ihren Domains abgleicht.",[677,678,679,680,683,684,687,688,691,692,695,696,699],"note",{},"Die Adresse kommt aus dem Feld ",[437,681,682],{},"E-Mail"," des Benutzers in Entra ID (Attribut ",[515,685,686],{},"mail","). Haben Ihre Leute kein Postfach und ist das Feld leer, ist ihr Anmeldename (",[515,689,690],{},"anna@firma.de",") aber ihre E-Mail-Adresse, tragen Sie in DDM als ",[437,693,694],{},"E-Mail-Anspruch (Claim)"," stattdessen ",[515,697,698],{},"preferred_username"," ein.",[466,701,703],{"id":702},"_4-in-ddm-eintragen","4. In DDM eintragen",[433,705,706,707,450,709,450,711,714],{},"Unter ",[437,708,98],{},[437,710,199],{},[437,712,713],{},"Identitätsanbieter",":",[716,717,718,730],"table",{},[719,720,721],"thead",{},[722,723,724,728],"tr",{},[725,726,727],"th",{},"Feld",[725,729,606],{},[731,732,733,748,760,772,785],"tbody",{},[722,734,735,741],{},[736,737,738],"td",{},[437,739,740],{},"Beschriftung",[736,742,743,744,747],{},"z. B. ",[515,745,746],{},"Microsoft"," oder der Name Ihrer Firma",[722,749,750,755],{},[736,751,752],{},[437,753,754],{},"Aussteller (Issuer)",[736,756,757],{},[515,758,759],{},"https:\u002F\u002Flogin.microsoftonline.com\u002F\u003CVerzeichnis-ID (Mandant)>\u002Fv2.0",[722,761,762,767],{},[736,763,764],{},[437,765,766],{},"Client-ID",[736,768,769,770],{},"die ",[437,771,571],{},[722,773,774,779],{},[736,775,776],{},[437,777,778],{},"Geheimer Clientschlüssel",[736,780,781,782,784],{},"der ",[437,783,606],{}," des Schlüssels",[722,786,787,791],{},[736,788,789],{},[437,790,694],{},[736,792,793,795,796,798],{},[515,794,635],{}," (oder ",[515,797,698],{},", siehe oben)",[433,800,561,801,804,805,808,809,812,813,499],{},[437,802,803],{},"Speichern",", dann auf ",[437,806,807],{},"Verbindung testen",", und schalten Sie ",[437,810,811],{},"Single Sign-on aktiv"," ein – siehe ",[483,814,199],{"href":815},"\u002Fde\u002Fsign-in-and-directories\u002Fsingle-sign-on#_4-einschalten",[609,817,818,819,822,823,460,826,829],{},"Nehmen Sie den Aussteller ",[437,820,821],{},"mit Ihrer Mandanten-ID",". Die gemeinsame Adresse mit ",[515,824,825],{},"common",[515,827,828],{},"organizations"," wird abgewiesen – sie würde Konten aus jedem Microsoft-Mandanten annehmen.",[466,831,833],{"id":832},"_5-optional-nur-bestimmte-personen","5. Optional: nur bestimmte Personen",[433,835,836,837,450,839,450,842,450,844,847,848,851,852,855,856,859],{},"Standardmäßig darf jede Person Ihres Mandanten die App nutzen. Um sie auf bestimmte Personen oder Gruppen zu beschränken, gehen Sie zu ",[437,838,492],{},[437,840,841],{},"Unternehmensanwendungen",[515,843,517],{},[437,845,846],{},"Eigenschaften",", setzen ",[437,849,850],{},"Zuweisung erforderlich?"," auf ",[437,853,854],{},"Ja"," und fügen die Personen oder Gruppen unter ",[437,857,858],{},"Benutzer und Gruppen"," hinzu.",[433,861,862,863,499],{},"Das ist eine zweite Tür vor der von DDM: Ob jemand überhaupt hineinkommt, entscheiden weiterhin Ihre bestätigten Domains und ",[437,864,865],{},"Konten beim ersten Login anlegen",[466,867,869],{"id":868},"_6-gruppen-zuordnen","6. Gruppen zuordnen",[433,871,872],{},"Damit DDM Ihre Leute anhand ihrer Entra-ID-Gruppen Gruppen zuordnet:",[581,874,875,883,902],{},[508,876,877,878,450,880,499],{},"Öffnen Sie in der App-Registrierung ",[437,879,663],{},[437,881,882],{},"Gruppenanspruch hinzufügen",[508,884,885,886,889,890,893,894,450,896,898,899,499],{},"Haken Sie ",[437,887,888],{},"Sicherheitsgruppen"," an (oder ",[437,891,892],{},"Der Anwendung zugewiesene Gruppen",", wenn Sie Gruppen unter ",[437,895,841],{},[437,897,858],{}," zuweisen – empfohlen, das hält das Token klein). Lassen Sie das Format für das ID-Token auf ",[437,900,901],{},"Gruppen-ID",[508,903,904,905,513,908,911,912,915,916,919,920,922,923,925],{},"Tragen Sie in DDM unter ",[437,906,907],{},"Gruppen",[515,909,910],{},"groups"," als ",[437,913,914],{},"Gruppen-Anspruch (Claim)"," ein und fügen Sie für jede Gruppe eine Zuordnung hinzu: die ",[437,917,918],{},"Objekt-ID"," der Gruppe – in Entra ID unter ",[437,921,907],{}," › die Gruppe › ",[437,924,567],{}," – und die DDM-Gruppe.",[677,927,928,929,931],{},"Entra ID schickt höchstens 200 Gruppen in einem Token. Für jemanden in mehr Gruppen schickt es nur einen Verweis, und DDM lässt die Gruppen dieser Person dann, wie sie sind. ",[437,930,892],{}," vermeidet das.",[466,933,935],{"id":934},"_7-optional-den-kalender-gleich-mitbringen","7. Optional: den Kalender gleich mitbringen",[433,937,938,939,942],{},"Mit ",[437,940,941],{},"Kalender bei der Anmeldung verbinden"," (nur OpenID Connect) fragt die Anmeldung auch den Kalender an, und der Outlook-Kalender ist in DDM verbunden, sobald sich jemand anmeldet:",[581,944,945,965],{},[508,946,947,948,450,950,450,952,513,954,636,957,960,961,964],{},"In Entra ID unter ",[437,949,627],{},[437,951,650],{},[437,953,653],{},[515,955,956],{},"Calendars.ReadWrite",[515,958,959],{},"offline_access"," hinzufügen und ",[437,962,963],{},"Administratorzustimmung erteilen"," – sonst fragt Microsoft jede Person einmal.",[508,966,967,968,970],{},"In DDM bei der Microsoft-Anmeldung ",[437,969,941],{}," einschalten.",[433,972,973,974,976],{},"Wer schon angemeldet ist, bekommt den Kalender bei der nächsten Anmeldung. Eine ",[483,975,235],{"href":236}," geht vor: Verbindet sie den Kalender schon, bleibt es dabei. Mit SAML geht das nicht – SAML bringt keine Tokens mit.",[466,978,980],{"id":979},"stattdessen-mit-saml","Stattdessen mit SAML",[433,982,983],{},"Entra ID kann DDM auch per SAML anbinden – etwa wenn Ihre IT-Sicherheit es verlangt.",[581,985,986,1000,1024,1044,1067,1085],{},[508,987,988,989,450,991,993,994,636,996,999],{},"Fügen Sie unter ",[437,990,98],{},[437,992,199],{}," einen Anbieter mit ",[437,995,213],{},[437,997,998],{},"SAML 2.0"," hinzu. DDM zeigt drei Werte dafür.",[508,1001,1002,1003,1006,1007,450,1009,450,1011,450,1014,1017,1018,1020,1021,499],{},"Gehen Sie im ",[483,1004,488],{"href":485,"rel":1005},[487]," zu ",[437,1008,492],{},[437,1010,841],{},[437,1012,1013],{},"Neue Anwendung",[437,1015,1016],{},"Eigene Anwendung erstellen",", nennen Sie sie ",[515,1019,517],{}," und wählen Sie ",[437,1022,1023],{},"Beliebige andere, nicht im Katalog enthaltene Anwendung integrieren (nicht im Katalog)",[508,1025,585,1026,450,1029,1032,1033,1036,1037,572,1040,1043],{},[437,1027,1028],{},"Einmaliges Anmelden",[437,1030,1031],{},"SAML",". Tragen Sie unter ",[437,1034,1035],{},"SAML-Basiskonfiguration"," den ",[437,1038,1039],{},"Bezeichner (Entity ID)",[437,1041,1042],{},"Antwort-URL (ACS-URL)"," aus DDM ein.",[508,1045,706,1046,1049,1050,1053,1054,1057,1058,1060,1061,1064,1065,699],{},[437,1047,1048],{},"Attribute & Ansprüche"," wird die E-Mail-Adresse von sich aus als ",[515,1051,1052],{},"http:\u002F\u002Fschemas.xmlsoap.org\u002Fws\u002F2005\u002F05\u002Fidentity\u002Fclaims\u002Femailaddress"," geschickt – genau das, was DDM als ",[437,1055,1056],{},"E-Mail-Attribut"," vorschlägt. Für Gruppen klicken Sie auf ",[437,1059,882],{},"; sie kommen als ",[515,1062,1063],{},"http:\u002F\u002Fschemas.microsoft.com\u002Fws\u002F2008\u002F06\u002Fidentity\u002Fclaims\u002Fgroups"," – tragen Sie das in DDM als ",[437,1066,914],{},[508,1068,1069,1070,1073,1074,1077,1078,450,1081,1084],{},"Kopieren Sie unter ",[437,1071,1072],{},"SAML-Zertifikate"," die ",[437,1075,1076],{},"App-Verbundmetadaten-URL"," und tragen Sie sie in DDM unter ",[437,1079,1080],{},"Metadaten Ihres Anbieters",[437,1082,1083],{},"Metadaten-URL"," ein. Speichern.",[508,1086,1087,1088,1090],{},"Weisen Sie unter ",[437,1089,858],{}," die Personen oder Gruppen zu, die DDM nutzen dürfen.",[433,1092,1093,1094,499],{},"Läuft das Zertifikat bald ab, legt Entra ID ein neues an; aktivieren Sie es dort und klicken Sie dann in DDM auf ",[437,1095,1096],{},"Metadaten neu laden",[466,1098,1100],{"id":1099},"häufige-fehler","Häufige Fehler",[716,1102,1103,1116],{},[719,1104,1105],{},[722,1106,1107,1110,1113],{},[725,1108,1109],{},"Meldung",[725,1111,1112],{},"Ursache",[725,1114,1115],{},"Lösung",[731,1117,1118,1140,1164,1181,1197,1213,1233,1255],{},[722,1119,1120,1126,1129],{},[736,1121,1122,1125],{},[515,1123,1124],{},"AADSTS50011"," – Umleitungs-URI passt nicht",[736,1127,1128],{},"Die Umleitungs-URI in Entra ID weicht von der in DDM ab",[736,1130,1131,1132,1135,1136,1139],{},"Erneut aus DDM kopieren – auf ",[515,1133,1134],{},"http","\u002F",[515,1137,1138],{},"https"," und einen Schrägstrich am Ende achten.",[722,1141,1142,1148,1158],{},[736,1143,1144,1147],{},[515,1145,1146],{},"AADSTS7000215"," – ungültiger geheimer Clientschlüssel",[736,1149,1150,1151,1154,1155,1157],{},"Statt des ",[437,1152,1153],{},"Werts"," wurde die ",[437,1156,617],{}," eingetragen, oder der Schlüssel ist abgelaufen",[736,1159,1160,1161,1163],{},"Neuen Schlüssel anlegen und seinen ",[437,1162,606],{}," in DDM eintragen.",[722,1165,1166,1172,1175],{},[736,1167,1168,1171],{},[515,1169,1170],{},"AADSTS700016"," – Anwendung im Verzeichnis nicht gefunden",[736,1173,1174],{},"Client-ID und Mandanten-ID gehören nicht zusammen",[736,1176,1177,1178,1180],{},"Beide mit der ",[437,1179,567],{}," der App vergleichen.",[722,1182,1183,1189,1194],{},[736,1184,1185,1188],{},[515,1186,1187],{},"AADSTS50105"," – der App nicht zugewiesen",[736,1190,1191,1193],{},[437,1192,850],{}," ist an, und die Person ist nicht zugewiesen",[736,1195,1196],{},"Person oder ihre Gruppe zuweisen.",[722,1198,1199,1204,1207],{},[736,1200,1201],{},[437,1202,1203],{},"Administratorgenehmigung erforderlich",[736,1205,1206],{},"Die Administratorzustimmung fehlt",[736,1208,1209,450,1211,499],{},[437,1210,627],{},[437,1212,657],{},[722,1214,1215,1221,1227],{},[736,1216,1217,1220],{},[437,1218,1219],{},"Das Dokument gehört zu einem anderen Aussteller"," (in DDM, beim Speichern)",[736,1222,1223,1224,1226],{},"Der Aussteller enthält ",[515,1225,825],{}," oder eine falsche Mandanten-ID",[736,1228,1229,1232],{},[515,1230,1231],{},"https:\u002F\u002Flogin.microsoftonline.com\u002F\u003CMandanten-ID>\u002Fv2.0"," nehmen.",[722,1234,1235,1240,1246],{},[736,1236,1237],{},[437,1238,1239],{},"Ihre E-Mail-Adresse liegt auf keiner bestätigten Domain Ihrer Organisation",[736,1241,1242,1243],{},"Entra ID hat keine oder eine Adresse auf einer anderen Domain geschickt – oft ",[515,1244,1245],{},"…@firma.onmicrosoft.com",[736,1247,1248,1249,1251,1252,1254],{},"Optionalen Anspruch ",[515,1250,635],{}," ergänzen und das Feld ",[437,1253,682],{}," der Benutzer füllen; oder die Domain in DDM bestätigen.",[722,1256,1257,1262,1265],{},[736,1258,1259],{},[437,1260,1261],{},"Single Sign-on hat nicht geklappt",[736,1263,1264],{},"Meist fehlt die E-Mail-Adresse in der Anmeldung",[736,1266,1267,1268,1270,1271,911,1273,499],{},"Wie oben: optionaler Anspruch ",[515,1269,635],{},", oder ",[515,1272,698],{},[437,1274,694],{},[466,1276,1278],{"id":1277},"microsoft-anmeldung-für-die-ganze-installation","Microsoft-Anmeldung für die ganze Installation",[433,1280,1281,1282,1285,1286,632,1289,632,1292,1295,1296,1299,1300,1303],{},"Unabhängig davon kann der Betrieb einer DDM-Installation ",[437,1283,1284],{},"Mit Entra ID anmelden"," für alle Organisationen darauf anbieten – mit einer App-Registrierung für alle, eingerichtet auf dem Server (",[515,1287,1288],{},"MICROSOFT_CLIENT_ID",[515,1290,1291],{},"MICROSOFT_CLIENT_SECRET",[515,1293,1294],{},"NUXT_PUBLIC_SSO_PROVIDERS=\"microsoft\"",", Umleitungs-URI ",[515,1297,1298],{},"\u003CBETTER_AUTH_URL>\u002Fapi\u002Fauth\u002Fcallback\u002Fmicrosoft",", eine ",[437,1301,1302],{},"mehrinstanzenfähige"," Registrierung). Sie legt keine Konten an und ist für alle gleich; eine Organisation, die ihren eigenen Mandanten, eigene Regeln oder Okta will, nutzt Single Sign-on wie oben beschrieben.",{"title":552,"searchDepth":1305,"depth":1305,"links":1306},2,[1307,1314,1315,1316,1317,1318,1319,1320,1321,1322],{"id":468,"depth":1305,"text":469,"children":1308},[1309,1311,1312,1313],{"id":477,"depth":1310,"text":478},3,{"id":502,"depth":1310,"text":503},{"id":529,"depth":1310,"text":530},{"id":557,"depth":1310,"text":558},{"id":578,"depth":1305,"text":579},{"id":621,"depth":1305,"text":622},{"id":702,"depth":1305,"text":703},{"id":832,"depth":1305,"text":833},{"id":868,"depth":1305,"text":869},{"id":934,"depth":1305,"text":935},{"id":979,"depth":1305,"text":980},{"id":1099,"depth":1305,"text":1100},{"id":1277,"depth":1305,"text":1278},"Das Entra ID Ihrer Organisation (früher Azure AD) anbinden – DDM im eigenen Mandanten registrieren und in DDM eintragen.","md",null,{},{"icon":216},{"title":213,"description":1323},"mc1T0emKh68URHIddu2erQLZlqLgGf5KJghjTcQuA58",[1331,1333],{"title":208,"path":209,"stem":210,"description":1332,"icon":211,"children":-1},"Wann DDM mit dem Verzeichnis abgleicht, was es dabei ändert und was nie, wie das Firmenkennwort funktioniert – und was tun, wenn etwas nicht klappt.",{"title":218,"path":219,"stem":220,"description":1334,"icon":221,"children":-1},"Das Okta Ihrer Organisation anbinden – eine OpenID-Connect-App-Integration anlegen und in DDM eintragen.",1793617727752]