This is effectively creating the initial web API registration for the server side RESTful services. This allows a web API with the correct details to authorise accounts.
Open the Azure portal (https://portal.azure.com) and log in with your credentials.
Make sure that you are using the appropriate Azure tenant domain. We recommend that the default xxx.onmicrosoft.com tenant be used (eg. mytenant.onmicrosoft.com)
Find the menu item “Azure Active Directory”. As there are a few ways to find the link on the portal, the simplest way is to perform a search for “Active Directory” and it will be listed as a service.
Once you have found the option, select it and then select “App registrations”; you will be presented with the following screen:
App registrations screen
Select “+ New application” at the top; you will get the following screen:
Register an application screen
Fill in the following details:
Name – This is the name of the application, it must be the value M1x
Supported account types – Select “Accounts in this organizational directory only”
Platform configuration – Select “Web API”
Once the details are filled in, click the “Register” button.
Once created you will see the following screen:
API permissions screen
On the right of “Microsoft Graph (1)”, there are three dots. Right-click to bring up a menu, then select “Remove all permissions”. A prompt will ask you to confirm, click “Yes, remove” to remove this item:
Click “+ Add a permission”, ensure “Microsoft APIs” are selected at the top and click on “Microsoft Graph”:
Request API permissions screen
Select “Delegated permissions”, scroll down to “User” and expand the tree. Tick the item “User.Read” and then click “Add permissions”:
Request API permissions screen
Click “Expose an API” on the left side menu, you will see the following screen:
Expose an API screen
Note that the heading “Application ID URI” near the top will have a “Set” link, click “Set” to open the dialogue that will allow you to set an application ID URI:
Enter the Application ID URI as the combination of the default tenant with HTTPS at the beginning and the M1x directory (eg. https://mytenant.onmicrosoft.com/M1x). Click “Save” to set the Application ID URI.
Click “+ Add a scope” and you will see the following dialogue:
Add a scope dialogue
Fill in the following details:
Scope name – This is the name of the scope, it must be the value user_impersonation
Who can consent? – Select “Admins and users”
Admin consent display name – Enter the value Access M1x
Admin consent description – Enter: Allow the application to access M1x on behalf of the signed-in user.
User consent display name - Enter the value Access M1x
User consent description – Enter: Allow the application to access M1x on your behalf.
Once the details are filled in, click the “Add scope” button.
Click the “+ Add a scope” button again to create another scope. Fill in the following details:
Scope name – This is the name of the scope, it must be the value User.Read
Who can consent? – Select “Admins and users”
Admin consent display name – Enter the value Read user profile
Admin consent description – Enter: Allows the app to read the user profile
User consent display name - Enter the value Read your profile
User consent description – Enter: Allows the app to read your user profile
Once the details are filled in, click the “Add scope” button.
There should now be two scopes as well as the Application ID URI as displayed:
Select API Permissions on the left menu to add more permissions with the scopes that have just been added above.
Click “+ Add a permission”, ensure “My APIs” are selected at the top and click on “M1x”:
Expand “User” then tick the boxes that correspond to “user_impersonation” and “User.Read”. Click “Add permissions” when done:
Select permissions screen
Select “Authentication” on the left menu; you will see:
Authentication screen
Click “+ Add a Platform”, then select “Web”
Configure platforms screen
Enter https://localhost as the value within “Redirect URIs” and ensure that “Access tokens” and “ID Tokens” are ticked. Click “Configure” when done.
Configure Web screen
Click on “Branding” on the left menu, then fill in the “Home” with the value https://localhost and click “Save”:
Branding screen
