From 853d1a01cfafa5fbf41e41aa08b73557e41a1ab4 Mon Sep 17 00:00:00 2001
From: swethaa <cinderella2020swethaa@gmail.com>
Date: Sat, 6 Dec 2025 17:02:45 +1100
Subject: [PATCH] Added openwebui setup documentation

---
 docs/openwebui_setup_documentation.md | 41 +++++++++++++++++++++++++++
 1 file changed, 41 insertions(+)
 create mode 100644 docs/openwebui_setup_documentation.md

diff --git a/docs/openwebui_setup_documentation.md b/docs/openwebui_setup_documentation.md
new file mode 100644
index 00000000..9b00b718
--- /dev/null
+++ b/docs/openwebui_setup_documentation.md
@@ -0,0 +1,41 @@
+# OpenWebUI Azure AD Setup Documentation
+
+## 1. Creating the **AI User** Azure AD Group
+1. Sign in to **Intra**.
+2. Navigate to **Azure AD → Groups → New Group**.
+3. Configure the group:
+   - **Group Type:** Security
+   - **Group Name:** AI User
+   - **Owners:** Swethaa Sundaram, Richard (and later Ben)
+   - **Members:** Swethaa Sundaram, Richard, Ben
+   - **Membership Type:** Assigned
+     - Chosen because it allows manual selection of members and gives owners easier control over who has access.
+4. Create the group.
+
+## 2. Registering the **OpenWebUI** Application in Azure
+1. Go to **Azure AD → App Registrations → New Registration**.
+2. Configure the app:
+   - **Name:** OpenWebUI
+   - **Supported Account Types:** Accounts in this organization directory only (Single Tenant)
+   - **Redirect URI Platform:** Web
+   - **Redirect URI:** The callback URL provided by Richard
+3. Click **Register**.
+
+## 3. Collecting Required IDs for Richard
+After registration:
+- **Microsoft Client ID:** Copied from *Application (client) ID*
+- **Microsoft Tenant ID:** Copied from *Directory (tenant) ID*
+
+## 4. Creating the Client Secret
+1. Go to **Certificates & Secrets**.
+2. Click **New Client Secret**.
+3. Add:
+   - **Description:** OpenWebUI Secret
+   - **Expiry:** 6–12 months (recommended)
+4. Click **Add**.
+5. Copy the **Value** of the client secret (this is the actual secret Richard asked for).
+   - *Note:* The **Secret ID** is **not** used — only the **Value**.
+
+---
+If you'd like, I can extend this documentation with diagrams, step-by-step screenshots placeholders, or the next steps for configuring OpenWebUI with Azure AD authentication.
+