This is version 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 . It is not the current version, and thus it cannot be edited.
[Back to current version]   [Restore this version]

Start at the Microsoft Azure Portal: Link

Application registration: Navigate to App registrations in the Azure Portal. Click on New registration to create a new application.



The Redirect URL must end with register_microsoft_graph_api/.

    http://localhost:9090/register_microsoft_graph_api/

or

    
    https://your.crushftp.domain.com/register_microsoft_graph_api/
    

Secret key: A new client secret must be created. Go to Certificates & secrets, and generate a new client secret by clicking on New client secret. Ensure you copy over the value immediately!






Configure the API Permissions:

Ensure the application has the following Delegated Permissions assigned:
a.) User.Read:
b.) Group.Read.All:



Grant Admin consent for the newly added permission.



Get Client ID and Tenant ID from App registration -> Overview.



Group info:

You can add groups claim to the token.

!!!Continue on: CrushOIDC