livewells
Menu

Microsoft Entra set-up

livewells signs people in with Microsoft Entra ID. Your Entra administrator approves the livewells app once. After that, your people sign in with their work accounts.

The livewells app

  • The app name is livewells.
  • The application (client) id is 543854a7-ed87-4cba-a08a-69e16ce7deef.
  • The app accepts work and school accounts from any organisation.
  • The app asks for three delegated permissions: openid, profile and email.
  • livewells asks for no access to mail, files or any other Microsoft data.

A Microsoft Entra administrator opens https://app.livewells.io/auth/consent.

  1. The link sends the administrator to Microsoft to approve the livewells app.
  2. The administrator signs in and approves.
  3. Microsoft returns the administrator to livewells. A page headed "Thank you" shows your organisation id. Send that id to Maelstrom AI.
  4. If the administrator does not approve, the page says "Consent was not given" and nothing changes.

In the Entra portal, the same step is under Enterprise applications: Permissions under Security, then Grant admin consent.

Limit sign-in to the people you assign

We recommend that you turn on "Assignment required" on the livewells enterprise application. Only the people you assign can then sign in.

  1. In the Microsoft Entra admin center, go to Enterprise applications and select the app.
  2. Open Properties, set Assignment required to Yes and save.
  3. Open Users and groups and choose Add user/group.
  4. Choose the analysts, the administrators and the people who read cases, and choose a role for each.

The app has three roles:

  • The role livewells member is for analysts.
  • The role livewells admin is for administrators.
  • The role livewells reader is for people with read-only access.

The role livewells admin lets a person sign in. The role alone does not make a person an administrator of your livewells organisation. See Administering livewells.

How long a sign-in lasts

  • A sign-in lasts 8 hours at most.
  • A sign-in ends after 30 minutes without use.
  • The first time a session is used after 15 minutes without a check, livewells checks it with Microsoft without a screen.
  • A person you disable in Entra loses the open session at that check.
  • A person holds up to 10 sessions at once. A new sign-in beyond that ends the oldest session.

Set-up by Maelstrom AI

When Maelstrom AI sets up your organisation by email, the order is:

  1. Your Entra administrator gives consent.
  2. Maelstrom AI links your Microsoft organisation to your livewells organisation. Tell Maelstrom AI when consent is done, and give the organisation id.
  3. You sign in at https://app.livewells.io/signin with your work account. You join as an analyst.
  4. Maelstrom AI names you administrator and tells you when it is done.

Before step 2 is done, a person who signs in sees "Your organisation is not set up for livewells yet" and an organisation id. Send that id to support@livewells.io.