On the File Protect appliance, the admin creates a Microsoft Office 365 app and registers it for an Azure AD v2.0 endpoint through the Microsoft App Registration Portal.
During app registration, the following unique properties are generated and used to authenticate with Azure AD for access tokens:
An application ID
A secret password
A redirect URL
Note
Just one app instance is created to initiate integration on the File Protect appliance.
For more information about Microsoft Application registration, go to Register your app with Azure AD v2.0.
Prerequisites
Administrator or Operator access to the File Protect appliance.
A Microsoft account for the File Protect appliance administrator.
A connection to the File Protect appliance.
To register an app:
Go to the Microsoft Application Registration Portal from a Web browser.
Sign in using a Microsoft account for the File Protect appliance administrator.
Find App registrations and click + New registration.
Enter the name for the app.
Under Supported account types, select Accounts in this organizational directory only.
Under Redirect URI, enter the platform location that the Azure AD v2.0 endpoint calls for authentication responses.
Click Register. A message confirms the creation of the app and the Overview page appears.
In the Overview page, copy the Application (client) ID for use during app authorization.
After you register your app, you must configure certain settings in the Overview page.
To configure app settings:
Setting name | Instructions |
|---|---|
Certificates & Secrets | Under Manage, select Certificates & secrets.
ImportantThe secret key is used to authorize app communication in the File Protect Web UI. After the dialog closes, you cannot return to retrieve the password. |
API permissions | The OneDrive and Sharepoint apps use application permissions. Application permissions are provisioned by the File Protect admin.
|