In the Microsoft Entra ID admin center, go to Microsoft Entra ID > App registrations.

To register a new application such as edyoucated, click New registration.

In the Name field, enter a name for the application, for example "edyoucated SSO".

Under Supported account types, select the account type that can use the application or access the API.

Paste the following Callback URI from edyoucated into the field under Redirect URI (like described here):

https://authentication-prod-edyoucated.auth.eu-central-1.amazoncognito.com/oauth2/idpresponse

Ensure that Web is selected from the drop-down menu as the redirect type.

To register the application, click Register.

In the new application that you have created in Microsoft Entra ID, go to Overview > Endpoints and click Endpoints.

You'll find the value in the OAuth 2.0 authorization endpoint (v2) field. This should look something like: https://login.microsoftonline.com/<SOME_UUID>/v2.0/authorize

Then in the application that you have created in Microsoft Entra ID, go back to Overview.

Copy the value that is listed for the Application (client) ID.

Then in the application that you have created in Microsoft Entra ID, go to Manage > Certificates & secrets.

Select Client secrets.

Then the Add a client secret drawer is displayed.

In the Description field, enter a name for the client secret and choose the relevant expiry date from the Expires drop-down menu.

Click Add.

A page is displayed showing an overview of the application credentials. Copy the value listed under the Value column.