Creating an Azure OAuth2 Application for RapidIdentity

Creating an Azure OAuth2 Application for RapidIdentity

1. Login to https://portal.azure.com/

2. Select Azure App Registrations in the Azure Services section
   

3. Select New Registration
   

4. Provide the Name of RapidIdentity and select Accounts in this organizational directory only (%Domain Name% only - Single tenant)

5. Click Register button.
   

6. Once registered be sure to take note of the Application(client) ID and Directory(tenant) ID

This inforamtion can be found later if necessary by navigating manually to App Registrations then selecting Overview from the left menu

7. Select API Permissions from below the Manage section of the left side menu
   

8. Select Add a Permission
   

9. Select Microsoft Graph
   

10. Select Application Permissions
    

11. Locate and Check Directory.ReadWrite.All
    

12. Click the Add Permissions button
    

13. Agree to Grant Admin Consent
    

14. Select Certificates & Secrets from below the Manage section of the left side menu
    

15. Select New Client Secret
    

16. Set Description to RapidIdentity-Client and the Expires to 24 Months which is the maximum allowed by Microsoft
    

17 Set a calendar reminder for yourself and others in your organization for a month prior to the expiration to update the API to avoid interruptions in service.

18. Click the Add button
    

19. A dialog box will appear with a Secret ID and Secret Value

20. Once completed your Certificates & Secrets section will look like the below. Please note the Value column is masked by asterisks and cannot be viewed
    

21. Go to the Roles and Administrators | Preview and select the link here to go to the directory-level roles
    

22. Search for Helpdesk Administrator and select that row.
    

23. Select Add Assignments
    

24. Search for the application that was registered earlier (should be named RapidIdentity) and select it. Once selected click Add to add it to the role. This gives the application the permissions to set non-administrator passwords.
    

25. Go back to the All Roles view by clicking All Roles at the top of the window.
    

26. Search for User Administrator and select the row.
    

27. Select Add Assignmnets
    

28. Search for the application that was registered earlier (should be named RapidIdentity) and select it. Once selected click Add to add it to the role. This gives the application the permissions to manage non-administrator accounts.