Register a service principal application for the SCIM Microservice in Azure AD

To manage Azure licenses, the EmpowerID Azure AD microservice requires a service principal application be registered in the Azure tenant to provide Azure AD authentication to the app service that hosts the microservice.

Register a service principal for app service auth

1. In Azure, navigate to your Azure Active Directory.

2. On the Azure Active Directory navbar, click App registrations.

3. On the App registrations page, click New registration.
   
   

   Open

   

    

4. Name the application, select the scope (single or multitenant) and click Register.

5. Once the application is registered, copy the Application (client) ID and Directory (tenant) ID from the Overview page. These values are used later.

6. Navigate to the Certificates & secrets blade for the application and upload the base-64 encoded certificate you are using to secure HTTP traffic between EmpowerID and the microservice. The public key certificate that you upload to Azure must have a corresponding private key in the EmpowerID certificate store; otherwise, an error will occur when calling Azure’s API.

7. Add a client secret and copy the value. You add this value to the Key Vault in your EmpowerID tenant.
   
   

   Open

   

Next steps

Create an app service for the Azure AD SCIM Microservice

Create a key vault

Provision a Cosmos DB Account for SharePoint Online

Create a Function app to Update User Profiles

Add application settings to the app service

Add Secret to Key Vault in EmpowerID Tenant

Publish the SharePoint Online Microservice

Configuration of SharePoint Online Inventory - Not Applicable if using EmpowerID SaaS