This section provides the details about registering the application, providing necessary permissions, retrieving Client Id and Client Secret from the Azure AD tenant, for both single tenant and multi-tenant connector configuration.

To register application, provide appropriate permissions, retrieve client ID, and client secret from the Azure AD tenant

1. Login to Azure portal and select Azure Active Directory.

2. Select App registrations.

   NOTE: For Safeguard for Privileged Passwords, the Azure AD application registration must be public.

3. Click New registration and provide the necessary details.

   Provide the following details:

   • Application name
   • Redirect URL: https://connect-supervisor.cloud.oneidentity.com/v1/consent.
4. Select the created application and click View API Permissions.
5. From API permission, add the required permissions for Microsoft Graph API (delegated and application permissions).

   The registered application must have the following permissions:

   • Directory.ReadWrite.All
   • Group.ReadWrite.All
   • User.ManageIdentities. All
   • User.ReadWrite.All

6. Create a user under Azure Active Directory and assign Privileged role administrator role under the user's Assigned roles.

   NOTE: A Global administrator would also be able to provide consent.

7. For the Azure Active Directory, assign User administrator role for the application created.

   NOTE: For Safeguard for Privileged Passwords, you must assign at least the Helpdesk Administrator role for the application created, but should assign a higher role if you want to manage special accounts (for example, Billing Administrator or Global Administrator).

   To assign User administrator role for the application created:

   1. Select Roles and administrators.

   2. Click + Add Assignments, and search the name of the application created.

8. Gather the following details from the corresponding pages of the application given in the table below.

   Table 446: Application details

   Details	Page
   Application (client) ID Azure Active Directory's Directory (tenant) ID	Overview
   Client Secret	Certificates & secrets

More details on Azure AD

For more details on Azure AD, refer the following links:

Table 447: More details on Azure AD

More details on Azure AD	Link
To register an application	https://docs.microsoft.com/en-us/azure/active-directory/develop/quickstart-register-app
To configure an application to access web APIs	https://docs.microsoft.com/en-us/azure/active-directory/develop/quickstart-configure-app-access-web-apis
To configure an application to expose web APIs	https://docs.microsoft.com/en-us/azure/active-directory/develop/quickstart-configure-app-expose-web-apis
To modify the accounts supported by an application	https://docs.microsoft.com/en-us/azure/active-directory/develop/quickstart-modify-supported-accounts