Microsoft Entra ID Setup Guide

Prerequisites

• An active Microsoft Entra ID account.
• An Azure account with one of the following roles: Application Administrator, Application Developer, or Cloud Application Administrator.

Setup Guide

Step 1: Register an application

1. Sign in to the Microsoft Entra admin center.
2. Go to Identity -> Applications -> App registrations.
3. Click + New registration.
4. Enter a Name for the application, for example Matia.
5. Under Supported account types, select Accounts in this organizational directory only.
6. Click Register.
7. Copy the Application (client) ID and Directory (tenant) ID from the app's Overview page — you'll need them to configure Matia.

Step 2: Add API permissions

1. In the app's navigation menu, click API permissions.
2. Click Add a permission -> Microsoft Graph -> Application permissions.
3. Select the following permissions:
   • User.Read.All
   • GroupMember.Read.All
   • TeamMember.Read.All
   • Channel.ReadBasic.All
   • Team.ReadBasic.All
   • RoleManagement.Read.Directory
   • AuditLog.Read.All
4. Click Add permissions.
5. Click Grant admin consent for {your organization}, then click Yes.

Step 3: Create a client secret

1. In the app's navigation menu, click Certificates & secrets.
2. Click + New client secret.
3. Enter a Description and select an Expires period.
4. Click Add.
5. Copy the secret Value — you'll need it to configure Matia. The value can't be retrieved again after you leave the page.

Step 4: Connect Microsoft Entra ID in Matia

1. Under Authentication, enter:
   • Tenant ID — the Directory (tenant) ID you copied in Step 1.
   • Client ID — the Application (client) ID you copied in Step 1.
   • Client Secret — the secret value you copied in Step 3.
2. Enter an Asset Name.
3. (Optional) Enter a Description.
4. (Optional) Assign Tags.
5. Select an Owner.
6. Verify that your Microsoft Entra ID account is successfully connected by clicking on Test Connection.
7. Click Connect.