App Registration Setup

Create an Azure app registration to connect Securtea to your Microsoft 365 tenant. This is typically done during onboarding but can be updated later.

Prerequisites

Before starting:

• Access to Azure Portal (portal.azure.com)
• One of these roles: Global Administrator, Application Administrator, or Cloud Application Administrator
• Your Microsoft 365 tenant ID

Step-by-Step Guide

Step 1: Open Azure Portal

1. Navigate to portal.azure.com
2. Sign in with your admin account
3. Search for "Microsoft Entra ID" or "App registrations"

Step 2: Create New Registration

1. Go to App registrations
2. Click + New registration
3. Complete the form:

4. Click Register

Step 3: Copy Application IDs

On the overview page, copy:

• Application (client) ID - The app's unique identifier
• Directory (tenant) ID - Your tenant identifier

Save these for entering into Securtea.

Step 4: Create Client Secret

1. Go to Certificates & secrets
2. Click + New client secret
3. Configure:
   • Description: Securtea Access
   • Expiration: 24 months (recommended)
4. Click Add

Step 5: Configure API Permissions

1. Go to API permissions
2. Click + Add a permission
3. Select Microsoft Graph
4. Select Application permissions
5. Add these permissions:

6. Click Add permissions

Step 6: Grant Admin Consent

1. Click Grant admin consent for [Your Organization]
2. Click Yes to confirm
3. Verify all permissions show green checkmarks

Step 7: Enter Credentials in Securtea

1. Return to Securtea
2. Go to Settings > Integrations > Microsoft 365
3. Enter:
   • Tenant ID
   • Client ID
   • Client Secret
4. Click Connect

Step 8: Test the Connection

1. Click Test Connection
2. Verify success message
3. Review any warnings

Verifying Setup

In Azure Portal

Confirm:

• App registration exists
• All permissions granted
• Admin consent provided

In Securtea

Confirm:

• Connection status: Connected
• Test connection: Success
• Data syncing correctly

Common Setup Issues

Missing Permissions

If some features don't work:

1. Check Azure app permissions
2. Add missing permissions
3. Re-grant admin consent
4. Test connection in Securtea

Invalid Client Secret

If authentication fails:

1. Check secret hasn't expired
2. Verify you copied the Value (not Secret ID)
3. Generate new secret if needed
4. Update in Securtea

Wrong Tenant

If connecting to wrong tenant:

1. Verify Tenant ID matches target tenant
2. Ensure app registration is in correct tenant
3. Update credentials in Securtea

Updating the Registration

Adding Permissions

To add permissions later:

1. Open app registration in Azure
2. Go to API permissions
3. Add new permissions
4. Grant admin consent
5. No Securtea update needed

Rotating Secrets

To rotate the client secret:

1. Create new secret in Azure
2. Update secret in Securtea
3. Test connection
4. Delete old secret in Azure

Changing App Registration

To use a different app registration:

1. Create new registration
2. Update credentials in Securtea
3. Test connection
4. Optionally delete old registration

What's Next?

• Permissions - Detailed permission info
• Troubleshooting - Connection issues
• Microsoft 365 Overview - Integration features