TABLE OF CONTENTS

Step 1: Register a new App under App Registrations

• Step 2: Use the provided Redirect URI 
• Step 3: Activate ID Tokens for the new App
• Step 4: Add optional claims for the App
• Step 5: Grant admin consent for app (optional)Note: This is to circumvent the need for each user to give consent the first time they log in.
• Step 6: Send details to Position Green
  • How to get the Client Secret

Step 1: Register a new App under App Registrations

Note: Don't use Enterprise applications as that won't work.

Step 2: Use the provided Redirect URI 

Step 3: Activate ID Tokens for the new App

Step 4: Add optional claims for the App

⚠️ Important: When asked if you want to add API Permissions automatically - click yes otherwise you need to add them manually as shown in the next image.

Step 5: Grant admin consent for app (optional)
Note: This is to circumvent the need for each user to give consent the first time they log in.

Step 6: Send details to Position Green

• Application (client) ID
• Client Secret value
• OpenID Connect metadata document 

Application (client) ID and OpenID Connect Metadata document is available under overview -> endpoints

eg: https://login.microsoftonline.com/YYYYYYYY-YYYY-YYYY-YYYY-YYYYYYYYYYYY/v2.0/.well-known/openid-configuration

How to get the Client Secret

1. In the left menu choose Certificates & secrets.
2. Under Client secrets click + New client secret, add a description and expiry, then Add.
3. Copy the Value now (it’s shown only once). Save it securely — that is the client secret.