# Configure Microsoft Identity

The OAuth 2.0 is the open authorization protocol used with the Application identity to access the API permission(s) granted by the tenant administrator.

To configure Microsoft Identity on MSL and administer access to the Microsoft resources using the Application identity created in your tenant directory, do the following on the Microsoft Azure portal:

1. Register an application, see here for help.

2. Obtain the unique Application ID and Tenant ID assigned by Azure Active Directory.

3. When you have the Application ID and the Application Secret (Client secret), Configuring Microsoft Identity on MSL.

## Configuring Microsoft Identity

Perform the following steps under Cloud Service Provider to complete the authorization related configuration at MSL:

1. Log in to MSL Server Manager as administrator.

2. Under Configuration, click Cloud Service Provider > Microsoft.

3. Complete the Configuration form:

   - Tenant directory...

     1. Tenant Name (Optional): Enter a descriptive name for the tenant directory. This field is optional.

     2. Tenant ID: Enter Directory (tenant) ID from the Azure Active Directory. This field is mandatory.

   - Application Identity...

     1. Application Name (Optional): Enter the descriptive name for the application created during application registration. This field is optional.

     2. Application ID: Enter the Application (client) ID from the Azure Active Directory. This field is mandatory.

     3. Application Secret: Enter the client secret obtained from the application Certificates & Secrets page. This field is mandatory.
        Note:

        - Certificate based authentication is not supported at this time.

        - Once the secret is copied, it cannot be retrieved again; if the secret is lost, another one needs to be created.

        - The admin can revoke the secret by deleting it, in which case a new secret is required.

4. Click Save.

Parent topic: Configuration
↑