Home

Registration in Azure Active Directory

 

Skype for Business Online uses Azure Active Directory (Azure AD) to provide authentication and authorization services that your application can use to obtain rights to access the Trusted Application APIs.

 

To allow your application use AAD's authentication and authorization services, you need to register your application in AAD. This will allow you to establish an identity for your application and specify the permission levels it needs in order to access the APIs.

 

 

Steps:

 

a.       Get an azure subscription at https://manage.windowsazure.com

 

 

b.       After getting the subscription, login to the portal and in the Active Directory (AD) tab, create or use existing one.

 

Add a new application under Active Directory - > Applications > Add

Machine generated alternative text: Microsoft Azure Test Test LYO D... 4. NEW test_test_lyo USERS GROUPS dbrl e3 APPL CATIONS CREDIT STATUS 10022012 CONFIGURE REPORTS AzTestAdmin@Iyncnadbr.ccsctp.net LICENSES APP URL http:/fwww.microsoft.com/en-us/server-d.. http#/offce.microsoft.cowoutlook/ http://otfice.microsoft.coWsharepoint/ http'//testapp.lyrcnadbr.ccsctp net http'//testdaemon.lyncnadbr.ccs ctp.net http'//testdaemon21yncnadbr.ccsctp.net/ http'//testname.lyncnadbr.ccsctp.net http'u/.'testrescn_lrce.lyr„;:nadbr.ccsctp.net DOMAINS DIRECTORY INTEGRATION v Search Application name or Client ID Show App ications my company uses NAME Microsoft Intune Office 365 Exchange Online Office 365 Management APIs Office 365 SharePoint Online Office 365 Skype for Business Online Office 365 Yammer testapp testdaem on testdaemon2 testdaem on natived ient testname testna tive testresource 10022012 10022012 10022012 10022012 10022012 10022012 10022012 Web applicaticn Web application Web application Web application Web application Web application Web application Web application Web application Native client application Web application Native client application Web application PUBLISHER Microsoft Corporation Microsoft Corporation Microsoft Corporation Microsoft Corporation Microsoft Corporation Microsoft Corporation Test Test Test Test Test Test Test Test Test Test Test Test Test Test LYO LYO LYO LYO LYO LYO LYO DBRI DBRI DBRI DBRI DBRI OBRI DBRI VIEW ENDPOINTS

Machine generated alternative text: What do you want to do? @ Add an application my organization is developing @ Add an application from the gallery @ Publish an application that will be accessible from outside your network

 

 

 

 

 

 

 

 

 

Machine generated alternative text: ADD APPLICATION Tell us about your application NAME demosaas Type @WES APPLICATION AND,'OR WEB API O NATIVE CLIENT APPLICATION

 

 

 

 

 

 

 

 

Machine generated alternative text: ADD APPLICATION App properties SIGN-ON URL http://demosaad.lyncnadbr.ccsctp.net APP ID URI http://demosaad.lyncnadbr.ccsctp.net

What are these URLs?

 

https://azure.microsoft.com/en-us/documentation/articles/active-directory-application-objects/

 

 

 

Machine generated alternative text: Microsoft Azure demosaas demosaas DASHBOARD properties NAME SIGN-ON URL CONFIGUR CREDIT STATUS OWNERS AzTestAdmin@lyncnadbr.ccsctp.net 4. USERS Microsoft Intune Office 365 Exchang... Office 365 Manage... Office 365 Sharepo„. Office 365 Skype f... Office 365 Yammer testapp testdaemo n testdaemon2 testdaemonnztivec... testnzme testnz tive testresource demosaas http://demosaad.lyncnadbr.ccsctp.net 727c43e2-08ea-4794-80f8-069bbbebb755 APPLICATION IS MULTI-TENANT CLIENT ID

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

Machine generated alternative text: 4. demosaas Microsoft Intune Office 365 Exchang... Office 365 Manage... Office 365 Sharepo„. Office 365 Skype f.. Office 365 Yammer testapp testdaemo n testdaemon2 testdaemonnztivec... testnzme testnz tive testresource NEW USER ASSIGNMENT REQUIRED TO EXPIRES ON THE KEV VALUE WILL BE DISPUVEDAFTER YOU VE IT. ACCESS APP keys Select du... single sign-on APP ID URI REPLY URL VAUD FROM Delegated Permissions: 1 http://demosaad.lyncnadbr.ccsctp.net http://demosaad.lyncnadbr.ccsctp.net (ENTER A REPL URL) rmissions to other applications Windows Azure Active Directory Add application Application Permissions: O MANAGE MANIFEST SAVE VIEW ENDPOINTS UPLOAD LOGO

 

Machine generated alternative text: Permissions to other applications SHOW Microsoft Apps API 365 Rights APPLICATION PERMISSIONS DELEGATED PERMISS„_ None Office 365 Office 365 AP's Office 365 81 Skype Wind m Actiæ Wind m Snice Ma

 

 

 

Application Permissions -> Application Roles: for accessing SFB Online with an application identity

 

Select whatever is relevant to your application and save.

 

 

 

Machine generated alternative text: permissions to other applications O Skype for Business Online Windows Azure Active Directory Add application Application Permissions: 3 Guest user join seæices (preview) Delegated Permissions: 2 Permissions: I @ Join and Manage Skype Meetings (preview) Create on-demand Skype meetings (preview) Send/Receive Instant Messages (preview)