In this article, I would like to share the steps to register an app in the Azure Active Directory.
Purpose of app registration
- It is used to integrate the application and service with Azure AD.
- Using Azure App, we can generate the token to authenticate the application.
- If we want to use the Azure AD capabilities, we must register the app.
- After we register the app, we can get the “Client ID, Secret key”.
Steps to register the new application in Azure AD
Follow the below-listed steps to register the application.
Step 1
Log into the Azure portal using your Azure account.
URL - https://portal.azure.com/
Step 2
Select Azure Active Directory from the left navigation.
Step 3
On the “Default directory” page, select the “App registrations” from the left panel, as shown below.
Step 4
From App Registration pane, click NewApplication Registration option.
Step 5
On the "Create" pane, type in the following information and then click the "Create" button.
| Field | Description | Sample |
| Name | Name for the new application. Type in the desired application name. | GraphConnectorApp |
| Application type | Leave as Web app/API | Web app/API |
| Sign in URL | Login URL. (To get the data from Graph API, we no need to provide the proper login URL. Just give office URL) | https://office.com |
Step 6
Once the application is created, edit the manifest file and change the value of oauth2AllowImplicitFlow parameter to true.
| Before |  |
| After |  |
Step 7
Save the changes first and then click X to close the pane.
Step 8
Then, we need to add the permissions. From Registered App pane, click the "Settings" option.
Step 9
From Settings pane, click the "Required Permissions" option.
Step 10
Now, click on + Add, then choose the “Select API”.
I’ve planned to use the new app for Graph API so I’ve selected Microsoft Graph. As per your need, you can select a different API.
Step 11
From the "Enable Access" pane, place a check in the checkbox in front of the following permissions from the Application Permissions and Delegated Permissions sections. Then, click the "Select" button.
Application Permissions
Delegated Permissions
Save the permissions.
Step 12
From Add API Access pane, verify the count of roles and scope. Then click the Done button.
Step 13
On Required Permissions pane, click the "Grant Permissions" option.
Note: Only Azure directory admin is able to do this.
Finally, you have granted permission to the Azure app.
Generate Secret key
Step 1
From Azure Active Directory Admin Centre, open the created application and click Settings option.
Log into https://aad.portal.azure.com/ > Azure Active Directory > App Registrations > select the created application name
Step 2
From Settings pane, click Keys option.
Step 3
From Keys pane, type in the following information and then click the "Save" button.
| Field | Description | Example |
| Description | Name for the key. Type in a descriptive name. | Secret Key |
| Expires On | Select Never expire option. | Never expire |
| Value | You will get the key when you click on the save | |
Step 4
From the Keys pane, copy the encoded key value. This key value cannot be retrieved after leaving this pane. This encoded key value is the Client Secret Key that will be a part of the authentication credential.
Then, close the key pane.
Steps to get the Tenant ID
Step 1
From Azure Active Directory Admin Center, navigate to the App Registrations pane.
Log into https://aad.portal.azure.com/ > Azure Active Directory > App Registrations
Step 2
From App Registrations pane, click Endpoints option.
Step 3
From Endpoints pane, click on the copy icon next to OAuth 2.0 Token Endpoint option and save the value.
From the copied endpoint URL, copy the value between
microsoftonline.com/ ….and / oauth2/token. This is the Tenant ID that will be part of the authentication credential.
Get the Client ID
Step 1
From Azure Active Directory Admin Center, open the created application and click Settings option.
Log into https://aad.portal.azure.com/ > Azure Active Directory > App Registrations > select the created application name .
Step 2
From Settings pane, copy the Application ID value. This is the Client ID that will be part of the authentication credential.
Summary
In this article, we have explored how to register an app in Azure active directory. We also saw that we need client ID, secret key and Tenant ID to generate the oAuth token for Graph API.
Happy learning.