Like Alisa said, it’s in the Kinetic Install guide. We do it with Entra (Azure AD) for both the client and the web. Just follow the directions. The most complicated part is getting the correct return URLs correct as they are case-sensitive. Try it out and ask questions if you have any issues.