Step 1: Register a new App under App Registrations

Note: Don't use Enterprise applications as that won't work.

Step 2: Use the provided Redirect URI 

Step 3: Activate ID Tokens for the new App

Step 4: Add optional claims for the App

⚠️ Important: When asked if you want to add API Permissions automatically - click yes otherwise you need to add them manually as shown in the next image.

Step 5: Grant admin consent for app (optional)
Note: This is to circumvent the need for each user to give consent the first time they log in.

Step 6: Send details to Position Green

• Application (client) ID
• Client Secret value
• OpenID Connect metadata document 

Application (client) ID and OpenID Connect Metadata document is available under overview -> endpoints

eg: https://login.microsoftonline.com/YYYYYYYY-YYYY-YYYY-YYYY-YYYYYYYYYYYY/v2.0/.well-known/openid-configuration