Register a service principal in Microsoft Entra ID

To integrate with the IGNOS API using a service principal, you need to create an app registration in your Microsoft Entra ID tenant.

1. Sign in to the Azure Portal as an administrator.

2. Search for and select Microsoft Entra ID.

3. Under Manage, select App registrations > New registration.

4. In the Register an application window, enter the app name, and then select Register.
   

5. Copy and make a note of the Application (client) ID. This value is required for authentication.

6. Under Manage, select Certificates & secrets > New client secret.

7. Enter a client secret description and an expiry time, and then select Add.

8. Copy and make a note of the client secret in the Value field.

   NOTE

   Make sure you copy this value now. This value will be hidden after you leave this page.

9. Configure API permissions:

   • Select API permissions. The Microsoft Graph User.Read permission should already be selected.
   • Select Add a permission and in the next screen, under APIs my organization uses, find Ignos.
   • For Application permissions, select the roles IGNOS has specified for your integration. See Access Control for what each role gives access to.
   • Select Add permissions. The screenshot shows Integration as an example.
   • The API permissions should now look something like this:
   • Select Grant admin consent for... and confirm that you want to make the new list of permissions active.

Client Credentials

After this process, you should have all you need to obtain valid access tokens for the IGNOS API.

Parameter	Example Value	Description
Base URL	https://api.ignos.io/	Root URL for the IGNOS API
Client ID	ea521e5b-fc15-4273-bb48-50a7de8311f2	Obtained in step 5
Client secret	7ny9Q~AyJgL.3ml-sK12Of2qh1MQqSzUY0Nxc	Obtained in step 8
Scope	api://a8b02577-baee-4b5e-987b-ee1fa3483013/.default	To be used when acquiring access tokens
Tenant ID	925f5fc3-4e18-49fd-8264-0bdcb14d56a0	Your Azure AD tenant ID