Application Setup
The first step is to create a Microsoft 365 application in the BlokSec admin console. This generates the federation endpoints and signing certificate that Microsoft will use to trust BlokSec as your identity provider.
Create the application
Section titled “Create the application”- Sign in to the BlokSec admin console
- Navigate to Applications in the sidebar
- Click Add Application
- Select the Microsoft 365 template from the list
Configure the application
Section titled “Configure the application”After selecting the template, you’ll be asked to configure a few settings:
Application name
Section titled “Application name”Give the application a descriptive name. This is shown to users in the BlokSec app when they receive a sign-in request, so use something recognizable like “Microsoft 365” or “Microsoft 365 — [Your Company]”.
Login URL
Section titled “Login URL”The login URL is pre-filled for Microsoft 365:
https://login.microsoftonline.comLeave this as-is unless you have a custom login portal.
Session duration
Section titled “Session duration”Set how long a user’s session remains valid before they need to re-authenticate with BlokSec. The default is 8 hours, which works well for a typical workday. You can adjust this based on your security policy:
- 4 hours — Higher security environments
- 8 hours — Standard office use (recommended)
- 12 hours — Reduced friction for shift workers or environments with lower security requirements
Primary authentication flow
Section titled “Primary authentication flow”Choose how users are notified when they need to approve a sign-in:
- Push notification (recommended) — Users receive a push notification on their phone and tap to approve
- QR code — Users scan a QR code displayed on the sign-in page with the BlokSec app
Save and continue
Section titled “Save and continue”Click Save to create the application. The admin console will generate:
- A unique application identifier (DID)
- Federation endpoints — the URLs that Microsoft 365 will use to communicate with BlokSec
- A signing certificate — used to sign the security tokens that BlokSec issues
You’ll use these in the next step when you configure federation.
