## Connector Overview

Microsoft Entra ID (formerly known as Microsoft Azure Active Directory or Azure AD) is a cloud-based identity and access management (IAM) solution. Our connector includes, but is not limited to the following services:

- Azure DevOps
- Azure Storage
- Azure SQL Database
- Business Central
- Microsoft Graph
- Microsoft Teams
- Microsoft 365

## Authentication Type

OAuth2

## Webhook Supported

No

## Secrets

- PAN_SEC_MICROSOFT_ENTRA_TOKEN_TYPE
- PAN_SEC_MICROSOFT_ENTRA_EXPIRES_AT
- PAN_SEC_MICROSOFT_ENTRA_EXPIRES_IN
- PAN_SEC_MICROSOFT_ENTRA_EXT_EXPIRES_IN
- PAN_SEC_MICROSOFT_ENTRA_ACCESS_TOKEN
- PAN_SEC_MICROSOFT_ENTRA_TENANT_ID

## API Client Supported

No

## Requirements for Provisioning

In order to provision your connector, the following MS Entra information must be gathered:

- Client ID
- Client Secret
- Entra ID Scope

To obtain your Client ID and Secret, perform the following steps:

1. Log Into your Azure Portal
2. In the left panel, select _Microsoft Entra (formally Azure Active Directory)_.
3. Select _App registrations_.
4. From the App registrations panel, select the app you built for Pandium > Note down the Application (client) ID; this is your Azure Client ID
5. If you did not build an app, to add a new application, click **New registration**
6. In the Manage section for the application, click _Certificates & secrets_.
7. If you do not have a client secret, create one:
   - Under Client secrets, click _New client secret_.
   - Enter a name and an expiration date and click _Add_.
   - In the Description box, type a description for the client secret.
   - For the Expires option, select an expiration date.
   - Click the Add button.
   - The new client secret is added > Copy or make a note of the client secret value.

For more information, please refer to the following help [documentation](https://learn.microsoft.com/en-us/entra/identity-platform/quickstart-register-app).

**Please note:** the application you registered and are connecting to Pandium also needs to be set up as a user in your Azure DevOps Account. For more information, please see [here](https://learn.microsoft.com/en-us/answers/questions/2203005/how-to-access-azure-devops-resources-via-microsoft).

## How to Connect Your Integration

Upon successfully creating a tenant, you will use the following Entra information/perform the follow steps to connect:

- Tenant ID

## API Resources

For more information on how to utilize MS Entra, feel free to reference the following [documentation](https://learn.microsoft.com/en-us/graph/identity-network-access-overview).