---
title: "Create Azure AD Application"
slug: "create-azure-ad-application"
tags: ["IT Pro"]
updated: 2024-07-22T11:37:25Z
published: 2024-07-22T11:37:25Z
canonical: "help.lanteria.com/create-azure-ad-application"
---

> ## Documentation Index
> Fetch the complete documentation index at: https://help.lanteria.com/llms.txt
> Use this file to discover all available pages before exploring further.

# Create Application for Data Sync

1. Sign in to the Azure portal, browse to **Microsoft Entra ID** > App registrations, and then click New registration to create a new application registration.  
![](https://cdn.document360.io/c315c68d-2799-4fcc-9a39-084315b58f14/Images/Documentation/image-1699626880133.png)
2. In the Register an application window, in the Name field, specify the name of the application.
3. Under the Supported Account Types field, select Accounts in this organizational directory only (Default Directory only - Single tenant).
4. Under Redirect URI (optional), select web, and then type your Lanteria HR site URL.
5. Click Register.
6. Once registered, you can see Application (client) ID and Directory (tenant) ID. Save these IDs somewhere; they will be required when filling in the Azure AD Connection Settings field while configuring [Office 365 Integration Settings](/v1/docs/office-365-integration-settings-in-lanteria-hr) in Lanteria HR.  
![](https://cdn.document360.io/c315c68d-2799-4fcc-9a39-084315b58f14/Images/Documentation/image-1699627110085.png)
7. Click **API Permissions**, and ensure that the following permissions are granted:     

| API/PERMISSION NAME | TYPE | DESCRIPTION | ADMIN CONSENT REQUIRED | STATUS |
| --- | --- | --- | --- | --- |
| Microsoft Graph (5) |
| Directory.AccessAsUser.All | Delegated | Access directory as the signed in user | Yes | Granted / Not Granted for [Your directory] |
| Directory.Read.All | Application | Read directory data | Yes | Granted / Not Granted for [Your directory] |
| Group.Read.All | Delegated | Read all groups | Yes | Granted / Not Granted for [Your directory] |
| User.Read | Application | **Sign in and read user profile** | **No** | Granted / Not Granted for [Your directory] |
| User.Read.All | Application | Read all users' fill profiles | Yes | Granted / Not Granted for [Your directory] |
8. Under **Grant Consent**, click **Grant admin consent for [Lanteria]**.  
![](https://cdn.document360.io/c315c68d-2799-4fcc-9a39-084315b58f14/Images/Documentation/image-1699628439619.png)
9. Click Yes to the confirmation message that appears.
10. Under **Manage**, click Certificates and Secrets, and then add a new client secret that will be used when filling in the Azure AD Connection Settings field while configuring [Office 365 Integration Settings in Lanteria HR](/v1/docs/office-365-integration-settings-in-lanteria-hr).
11. In the Description field, type the secret description.
12. Set Expires to 730 days (24 months).
13. Click Add.  
![](https://cdn.document360.io/c315c68d-2799-4fcc-9a39-084315b58f14/Images/Documentation/image-1699628716886.png)
14. Once a new client secret is created, copy it's value and save it somewhere, it will be used when [configuring Lanteria HR](/v1/docs/office-365-integration-settings-in-lanteria-hr).  
![](https://cdn.document360.io/c315c68d-2799-4fcc-9a39-084315b58f14/Images/Documentation/image-1699629260959.png)*Note**The ***Never Expire*** portal option for the Client Secret Expiry was removed in April 2021. Please set up a reminder to create a new client secret and update Lanteria HR settings before it expires.*