Breadcrumbs

Microsoft Entra ID Domains - Register an application in Azure

This guide explains how to configure Azure to integrate Microsoft Entra ID with Portal 360.

Once you have completed the configurations described below, you will have made the necessary adjustments in the Azure portal and will have the information needed to register the Microsoft Entra ID domain in NDD Print Portal Portal 360.

The permissions requested in this guide are required for the subsequent assignment of attributes as suggested on the domain creation screen integrated with MS Entra in Portal 360.

Access the Azure dashboard

  1. Sign in to the Azure Portal and go to the home page.

RegistrodeApp 1-20260303-130120.png

  1. In the search bar, type ‘entra’ and select the Microsoft Entra ID option.

RegistrodeApp 2-20260303-131552.png

The account used to sign in to Azure must have administrative permissions for the domain that will be integrated.

  1. Go to the Users tab to verify that you are managing the correct domain.

Creating the application

  1. In the settings for the domain you want to integrate, in the side menu, locate and select ‘App Registrations’.

RegistrodeApp 3-20260303-131416.png

  1. On the next screen, click ‘New Record’.

RegistrodeApp 4-20260303-132125.png


  1. On the creation screen, enter a suggested name for the app.

RegistrodeApp 5-20260303-132225.png

  1. For supported account types, select the appropriate option based on your environment.

RegistrodeApp 6-20260303-130120.png

At this point, we will not configure the redirect URLs.

  1. Click ‘Register’ to finish the setup.

  2. The newly created application will appear in the application list, as shown below:

RegistrodeApp 7-20260303-132510.png

Defining Application Permissions

NDD Print Portal 360 will perform a data synchronization with the MS Entra ID domain using the newly created application. To do this, you will need to configure the appropriate permissions.

RegistrodeApp 8-20260303-130120.png

How to add new permissions:

  1. Open the app from the list.

  2. In the side menu, select ‘API Permissions’.

RegistrodeApp 9-20260303-132601.png

  1. Click the ‘Add a permission’ button.

RegistrodeApp 10-20260303-132715.png

  1. In the drop-down menu that appears, select the ‘Microsoft Graph’ option.

RegistrodeApp 11-20260303-132758.png

Select the permission type:

  • The drop-down menu will display two categories:

    • Delegated permissions

    • Application permissions

RegistrodeApp 12-20260303-132845.png

The selection depends on the permission you are configuring:

  • If it is delegated, select Delegated Permissions

  • If it is application-related, select Application Permissions

  1. After selecting the category, enter the permission name, check the corresponding checkbox, and click ‘Add Permissions’.

RegistrodeApp 13-20260303-133040.png


Administrator consent:

  1. Some permissions require the administrator's consent for the domain. These permissions will be highlighted in the list.

RegistrodeApp 14-20260303-133146.png


  1. If your account has administrative privileges, the following button will appear: ‘Grant administrator consent for [Domain Name]’. Click it to complete the process:

RegistrodeApp 15-20260303-133211.png

Collecting Information for Portal 360

To complete the integration, you will need to collect the following information:

  • Application ID (Client)

  • Application domain

  • Directory ID (tenant)

  • Client secret

Obtaining the information

Application ID (Client):

  • Go to the ‘Overview’ tab for the application.

RegistrodeApp 16-20260303-133305.png


Application domain:

  • Look for this information in the path shown in the application panel.

Tip: It is usually located next to the tenant ID and other basic information.

RegistrodeApp 17-20260303-133436.png

Next:

RegistrodeApp 18-20260303-133522.png


Directory ID (tenant):

  • This can also be found on the ‘Overview’ tab of the application.

RegistrodeApp 19-20260303-133638.png


Client secret:

  • In the side menu, go to the ‘Certificates and secrets’ tab.

RegistrodeApp 20-20260303-133714.png


  • Click ‘New Client Secret’.

RegistrodeApp 21-20260303-133742.png


  • Add an enticing description, select the latest expiration date available, and click ‘Add’

RegistrodeApp 22-20260303-133905.png


  • The secret will be displayed in the list.

    Copy the value using the button next to the secret.

RegistrodeApp 23-20260303-133959.png

The confidential information must be stored in a secure location and shared only with those who need to know.

If you need more information about application registrations in environments that use Azure AD, follow the official link:

https://learn.microsoft.com/pt-br/entra/identity-platform/howto-create-service-principal-portal