Infrastructure Setup & Initialization

Deployment: b04b74ff-0926-4a8a-9c86-a90783195642_ctp-isv-cluster7 Hub: https://hub.cirrustempo.com Env: prod
Before You Begin

Complete these prerequisites before starting the wizard. You'll need all of these values during setup.

Microsoft Entra ID App Registration

Register an application in the Azure Portal and collect the following:

  • Tenant ID — from the app registration Overview page
  • Client ID (Application ID) — from the Overview page
  • Client Secret — create one under Certificates & secrets
Redirect URI is required. Under Authentication > Web, add:
https://ctpisv.cirrustempo.com/signin-oidc
Deployment Credentials

These values are generated during infrastructure provisioning and stored in Vault:

  • Registration Token — from your deployment output or Vault (secret/data/tenants/registration_secret)
  • Admin Email — the email address (matching your Entra ID) that will become the first administrator
Network Requirements
  • Outbound HTTPS access to login.microsoftonline.com
  • Outbound HTTPS access to the Control Hub URL
1
System Pre-flight Checks

Verifying connectivity to critical infrastructure: PostgreSQL, Vault, and Internal Services.

postgres-config Healthy
Vault Connectivity Healthy
Control Hub Healthy
Deployment ID: b04b74ff-0926-4a8a-9c86-a90783195642_ctp-isv-cluster7. Registration pending — complete unsealing and registration in steps below.
✅ All connectivity checks passed. System is ready for unsealing.
2
Bootstrap Authorization

Enter the Registration Token to prove identity as a cluster administrator.

This token is used for initial unsealing and DB initialization.
3
Database Initialization

Applying Entity Framework migrations and seeding standard system roles.

4
Register with Control Hub

Registering this deployment with the Choreologix Control Hub. This establishes your deployment's identity for license management, feature flags, and product updates.

5
Infrastructure & Identity Governance

In compliance with SOC2 best practices, local "fallback" passwords are disabled. You must configure an OIDC provider (Microsoft Entra ID) to finalize unsealing.

Primary Administrator
This email will be granted the 'Admin' role upon the first successful OIDC login.
Microsoft Entra ID (OIDC)