Machine to Machine

Prerequisites

• Cloud Application Administrator or higher privileges in Azure AD

Integration steps

Register a new application in Azure AD

1. Log in to the Entra ID portal.

2. Navigate to Identity → Applications → App registrations and select New registration.

3. Give your app a name and choose "Accounts in this organizational directory only".

   

4. Click Register.

Create client secret

1. Navigate to Certificates & secrets → Client secrets and click ➕ New client secret.

2. Give the secret a name and set an expiry date. Click Add.

   

3. Copy and securely store the string under the Value column. We will later use this string as the Client Secret while connecting.

Add API permissions

1. Navigate to API permissions and add the following permissions:

   1. Reports.read.all
   2. Auditlog.read.all
   3. Directory.read.all.
   
   

   ❗️

   These permissions enable only the required scopes for connecting with Zluri (Read Directory and Read Reports)—they don’t enable audit logs, and workflows-related features such as onboarding and offboarding.

   To fine-tune features, see the full list of Zluri scopes and corresponding Azure AD API permissions.

   

2. Click Add permissions.

3. Click Grant admin consent, then click Yes to confirm.

4. Navigate to the Overview page. It will display the Application (client) ID, and Directory (tenant) ID. Keep these two handy for the next steps.

   

Unhide user details in Azure AD

By default, user details are hidden for all Microsoft reports. You need to unhide them manually in the admin dashboard so that Zluri can access it:

1. Visit Admin Center, and navigate to Settings → Org Settings → Services. Select Reports.

2. Uncheck the Display concealed user, group, and site names in all reports checkbox, then save your changes.

   

Connect the Azure AD (Machine to Machine) instance in Zluri

1. Open the Integrations Catalog, search for “azure”, and click ➕ Connect under Azure AD (Machine to Machine).

   

2. Select the scopes you wish to add and click Continue. You can click the down-arrow button towards the right of a scope to find out what it does.

   🚧

   Some optional scopes need additional permissions beyond those in the Add API permissions section. See this document for the full mapping of Zluri scopes to Azure API permissions.

   

3. Fill out the entries as follows:

   1. Client ID: Value of Application (client) ID created while adding API permissions
   2. Client Secret: The string under the Value column obtained while creating the client secret
   3. Tenant ID: Value of Directory (tenant) ID created while adding API permissions
   

4. Click Connect, give the connection a name and description, and you’re ready to go!

Got questions? Feel free to submit a ticket or contact us directly at [email protected].