1.Configuration Steps

i).  Creating an App Registration

Follow the steps below to configure the Azure AD Application:

• Log in to Azure AD Portal as an Administrator.
• Under the Azure Services section, select Azure Active Directory.
• You will be represented with the home screen of Azure Active Directory.

• In the left navigation, select the App registrations under Manage section.

• Click on the New Registration .

• Assign Display Name in the Name field and choose the Account type (Account in this organization directory only , Demo only - Single tenant).
• In the Redirect URI field, provide the URL of your WordPress site click on the Register button.

2.Getting values

i).  Application ID

• After an application registration, Azure AD assigns a unique Application ID to your application.
• Navigate to your Application Overview tab, in the left panel.
• Copy the Application ID, this will be your Client ID.

ii).  Client Secret

• Navigate to the Certificates & Secrets tab.
• Click on New Client Secret. Enter the Description and expiration time of the Client Secret and click on the Add button.

• Copy the value of Client Secret. This will be your Client Secret Key.


Note: Copy the value of Client Secret not the Client Secret ID

iii).  Tenant ID

• Go to the Overview tab in your Azure Active Directory. Copy the value of Directory ID, this will be your Tenant ID .

iv).  Tenant Name (Primary Domain)

• Go to your Azure AD Tenant and navigate to the Overview tab and copy the Primary domain. This will be your Tenant Name.

3.Grant API Permissions

Add API Permissions to your Azure AD Application:

• Go to API Permissions from the left navigation pane and click on Add a permission button.

• Select Microsoft Graph under Microsoft APIs tab.

• Select Application Permissions and search for User.

• Under User select User.Read.All permission. Click on the Add permissions button.

• Click on Grant admin consent for Default Directory. Click on Yes to Grant admin consent confirmation.

• You have successfully configured your Azure AD application to achieve User Sync.

Additional Resources

• What is Single Sign-On (SSO)?
• What is SAML?
• Frequently Asked Questions (FAQs)

If you are looking for anything which you cannot find, please drop us an email on samlsupport@xecurify.com