Creating an Azure OAuth2 Application for RapidIdentity

RapidIdentity Platform Documentation
Solution
Application
Content Type
Technical Documentation
Utilities & Services
ft:locale
en-US

Follow these steps to create and configure an Azure OAuth2 application for RapidIdentity integration.

  1. Login to portal.azure.com
  2. Select Azure App Registrations in the Azure Services section
  3. Select New Registration
  4. Provide the Name of RapidIdentity and select Accounts in this organizational directory only (%Domain Name% only - Single tenant)
  5. Click Register button
  6. Take note of the Application(client) ID and Directory(tenant) ID
    This information can be found later if necessary by navigating manually to App Registrations then selecting Overview from the left menu
  7. Configure API Permissions:
    1. Select API Permissions from below the Manage section of the left side menu
    2. Select Add a Permission
    3. Select Microsoft Graph
    4. Select Application Permissions
    5. Locate and Check Directory.ReadWrite.All
    6. Click the Add Permissions button
    7. Agree to Grant Admin Consent
  8. Create Client Secret:
    1. Select Certificates & Secrets from below the Manage section of the left side menu
    2. Select New Client Secret
    3. Set Description to RapidIdentity-Client and the Expires to 24 Months
      This is the maximum allowed by Microsoft
    4. Set a calendar reminder for one month prior to expiration to update the API
      This helps avoid interruptions in service
    5. Click the Add button
    Warning:The Secret Value CANNOT be seen again after you close this dialog. If you do not have the value noted, a new Client Secret must be created
  9. Configure Helpdesk Administrator Role:
    1. Go to the Roles and Administrators | Preview and select the link to go to the directory-level roles
    2. Search for Helpdesk Administrator and select that row
    3. Select Add Assignments
    4. Search for the RapidIdentity application and select it
    5. Click Add to assign the role
    This gives the application permissions to set non-administrator passwords
  10. Configure User Administrator Role:
    1. Go back to All Roles view
    2. Search for User Administrator and select the row
    3. Select Add Assignments
    4. Search for the RapidIdentity application and select it
    5. Click Add to assign the role
    This gives the application permissions to manage non-administrator accounts