---
title: "Create Azure AD Application for Authentication"
slug: "create-azure-ad-application-for-authentication"
tags: ["IT Pro"]
updated: 2023-11-14T10:06:29Z
published: 2023-11-14T10:06:29Z
canonical: "help.lanteria.com/create-azure-ad-application-for-authentication"
---

> ## Documentation Index
> Fetch the complete documentation index at: https://help.lanteria.com/llms.txt
> Use this file to discover all available pages before exploring further.

# Create Application for Authentication

1. Sign in to the Azure portal, browse to **Microsoft Entra ID** > App registrations, and then click New registration to create a new application registration.  
![](https://cdn.document360.io/c315c68d-2799-4fcc-9a39-084315b58f14/Images/Documentation/image-1699621740597.png)
2. In the Register an application window, in the Name field, specify the name of the application.
3. Under the Supported Account Types field, select Accounts in this organizational directory only (Default Directory only - Single tenant).  
Select **Accounts in any organizational directory (Any Microsoft Entra ID tenant - Multitenant)** if users from other directory could also use this application to sign in to Lanteria HR. This is useful when you have single Lanteria HR system, but multiple directories (tenants).
4. Under Redirect URI (optional), select web, and then type https://youridentityserverurl, where instead of youridentityserverurl, type in your IdentityServer external DNS obtained when [configuring identity server](/v1/docs/configure-identity-server).  
![](https://cdn.document360.io/c315c68d-2799-4fcc-9a39-084315b58f14/Images/Documentation/image-1699622166997.png)
5. Click Register.
6. Once registered, you can see Application (client) ID and Directory (tenant) ID. Save these IDs somewhere; they will be required when [configuring the identity server](/v1/docs/configure-identity-server).  
![](https://cdn.document360.io/c315c68d-2799-4fcc-9a39-084315b58f14/Images/Documentation/image-1699623115230.png)
7. Click Authentication.  
Under **Redirect URIs**, add another one by clicking **Add URI** and typing [https://youridentityserverurl/signin-oidc](https://youridentityserverurl/signin-oidc).   
Select the ID tokens check box.  
Under **Front-channel logout URL**, type https://youridentityserverurl/connect/endsession  
Under **Implicit grant and hybrid flows**, check the **ID tokens (used for implicit and hybrid flows)** check box  
Click **Save**.  
![](https://cdn.document360.io/c315c68d-2799-4fcc-9a39-084315b58f14/Images/Documentation/image-1699623804185.png)
8. Click **API Permissions**, and ensure that the following permissions are granted for the Microsoft Graph API:  

| API/PERMISSION NAME Microsoft Graph (2) | TYPE | DESCRIPTION | ADMIN CONSENT REQUIRED | STATUS |
| --- | --- | --- | --- | --- |
| **Directory.Read.All** | **Application** | **Read directory data** | **Yes** | Granted/Not Granted for [Your_Directory] |
| User.Read | Delegated | Sign in and read user profile | No | Granted/Not Granted for [Your_Directory] |
9. Click **Grant admin consent for [Your_Directory]**.  
![](https://cdn.document360.io/c315c68d-2799-4fcc-9a39-084315b58f14/Images/Documentation/image-1699624213847.png)
10. Click Yes on the confirmation message that appears.