How to Configure Azure Active Directory for OneList

Complete the App Registration for OneList

Follow the these instructions to register OneList: https://docs.microsoft.com/en-us/azure/active-directory/develop/quickstart-register-app.

Parameter

Value

Example

Parameter

Value

Example

Name

OneList <Environment>

OneList DEV, OneList Prod

Supported account types

The “Accounts in this organizational directory only – single tenant” option is recommended

 

Redirect URI

https://<OneList hostname>/rolemananger/signin-azure

https://iqx.onelistapprovals.com/rolemananger/signin-azure

Create client secret

Configure access permissions

Follow these instructions to configure the API permissions: https://docs.microsoft.com/en-us/azure/active-directory/develop/quickstart-configure-app-access-web-apis#add-permissions-to-access-web-apis.

Microsoft API

Permission type

Permissions

Microsoft API

Permission type

Permissions

Microsoft Graph

Application permissions

  • openid

  • profile

  • Mail.ReadWrite (scroll down and expand the Mail section to select this permission)

  • User.Read (scroll down and expand the User section to select this permission)