How to register a new app in Microsoft Azure

Configure access to Microsoft API using OAuth

To configure access to the Microsoft API, following steps are needed.

• Register new application in the Microsoft Azure. 
• Create new client secret. 
• Add permissions for newly created app.

Steps are described in more detail in the chapters below.
For more information on registering applications, see https://docs.microsoft.com/en-us/azure/active-directory/develop/quickstart-register-app.

Registering new application

1. Go to the Microsoft Azure portal https://portal.azure.com/
2. Login with Microsoft account that will be used for application registration.
3. If you have logged to the Microsoft Azure portal for the first time, you will need to configure your subscription first. 
4. Click on the App registration.
   
   

   

5. Click on New registration.
   
   

   

   
   
   
6. Fill in 
   • Application name e.g. "MPS Integration"
   • Supported account types - select option according to what is needed. If the application is created only for one company, the first option is enough.
   • Redirect URI - select Web and in the text box, fill in the address where the application requesting the authorization is accessible. If authorization is started from the same computer where the application runs, http://localhost/ can be used. Additional redirect URIs can be added later.
   • Click  Register
     
     

   

   
   
   
7. New application will be created. On the Overview page we can see Application (client) ID which will be used by SAFEQ app to access the Microsoft API.
   
   

   

   a

Creating client secret

Prerequisite: Follow instructions for Registering new application.

1. Make sure you are in the correct application.
2. Navigate to the Certificates & secrets using the sidebar menu.
3. Click on New client secret.
   
   

   

4. Fill in
   • Description e.g. MPS
   • Expires - select expiration time of the secret
   • Click Add
     
     

   

   
   
5. New client secret will be created. Copy your secret value to some temporary file as you will be not able to view it after you leave this page. Client secret will be used by SAFEQ app to access the Microsoft API.
   
   

   

Adding API permissions

Prerequisite: Follow instructions for Creating client secret

1. Make sure you are in the correct application.
2. Navigate to the API permissions using the sidebar menu.
3. Click on Add a permission
4. Click on API to which we need an access.
5. Search for needed permissions and select them
   
   

   

6. Final Configured permissions should look similar to this.
   
   

   

Adding additional redirect URI

1. Make sure you are in the correct application.
2. Navigate to the Overview using the sidebar menu.
3. Click on Redirect URIs link.
   
   

   

4. Click Add URI
   
   

   

5. Add a new URI.
6. Save the URI by Save button.

(Optional) Adding optional claims to share users first name and given name

1. Make sure you are in the correct application.
2. Navigate to Token configuration using the sidebar menu.
3. Click on Add optional claim, a sidebar menu will popup from the right side of the window.
4. Select Token type ID, then select family_name and given_name and click Add.
   

   

5. If necessary, configure additional API permissions to include the necessary scopes. By default, the Management interface requires these scopes: 'openid', 'profile', 'email', 'offline_access'. For this please refer to section Adding API permissions.