Login Methods#

The AI-Tools can be used with one of the following login methods:

  • Without login: Anyone can use the AI-Tools without logging in. The AI-Tools are protected by an IP restriction and can only be used within one company.

  • LDAP: A VPN tunnel to the AI-Tools server is required.

  • Database: An account is created in Radio Creator for each user.

  • Microsoft Entra ID: SSO. An existing Microsoft infrastructure can be used over the internet. Users can access the AI-Tools with their Windows login.

Microsoft Entra ID#

With this login option, the AI-Tools can be used with a Microsoft account.

First, the app (application) must be registered in the company account on the Microsoft Identity Platform. This is described in detail in this guide: https://learn.microsoft.com/de-de/entra/identity-platform/quickstart-register-app

The app can be given a descriptive name. For example, “AI-Tools”.

The redirect URL (redirect_uri) must be entered. This URL consists of the server name and the organization_key:

https://<server>/<organization_key>/auth_response

For example:

https://ai-tools.radio-creator.com/rtffh/auth_response

In addition, a secret client key (client_secret) is created.

The following values must then be copied from the Microsoft platform and sent to the Radio Creator team:

tenant_id (directory ID), client_id (application ID), client_secret (client secret).

Permissions#

The AI-Tools require the following permissions on the Microsoft platform:

  • User.Read, to authenticate a user.

  • GroupMember.Read.All, to manage permissions within the AI-Tools, for example admin access. For this, the AI-Tools must retrieve which permission groups a user belongs to. This feature will be available in one of the next updates.

Roles and Permission Groups#

The AI-Tools can be operated with different roles and permission groups. If a user belongs to a group, they can use the corresponding functions.

Roles and permissions will be introduced gradually in upcoming updates. Here is an overview of the planned permissions:

  • ai-tools-admin: Can change system settings, for example external APIs.

  • ai-tools-speech: Access to the AI voice module.

  • ai-tools-protected: Editing protected workflows.

  • ai-tools-system: Editing system workflows, for example for the AI-Tools API.

  • ai-tools-rcm: Transferring AI audio files to Radio Creator Manager.