Configure a Microsoft Azure App Manually

Configure a Microsoft Azure app to establish a connection between Salesforce and Microsoft.

Note This step is part of manually integrating Microsoft 365 Azure with Salesforce. To refer to guided setup, see Set Up Microsoft 365 and Azure Integration Using Guided Setup.

1. Open Microsoft Azure.
2. Log in to your Microsoft Azure account.
3. Go to App registrations.
   You can access App registrations in two ways, either from Manage Microsoft Entra ID, click View, and find App registrations under Manage; or search for Azure AD B2C, click Manage, and select App registrations.
4. Click New Registrations.
5. Enter the details.
   1. Enter a name for the app.
      For example, MicrosoftApp.
   2. For supported account types, select Accounts in this organizational directory only (Salesforce -SFDC-CLM only - Single tenant).
   3. Click Register.
      
6. Note the Application (client) ID.
7. Add permissions.
   1. Click API permissions.
   2. Click Add a permission | Microsoft Graph Delegated permissions.
   3. In Select permissions, enter Files.ReadWrite.All.
   4. Select Files.ReadWrite.All permission, and click Add permissions.
   5. Similarly, add these permissions also:
      • openId
      • User.ReadWrite.All
      • Offline_access
   6. To remove the user.read permission, click … next to it, and select Remove.
   7. Click Grant admin consent for {TenantName}.
      
      A confirmation window opens.
   8. Click Yes.
      The status changes to Granted for Salesforce - {TenantName} for all permissions.
      
8. Add the new client secret.
   1. Click Certificates & secrets.
   2. Click New client secret.
      The Add a client secret window opens.
   3. Enter a description for the client secret.
      For example, MicrosoftApp.
   4. Enter or select an expiration timeframe.
   5. Click Add.
   6. Immediately copy and save the Client Secret Value. Use the copied client secret value while configuring Auth. Provider.
      Automatic encryption prevents retrieval of the client secret value. If you don't to save the client secret value immediately, you have to create a new client secret value.