> ## Documentation Index
> Fetch the complete documentation index at: https://docs.tierzerocode.com/llms.txt
> Use this file to discover all available pages before exploring further.

# Microsoft Entra ID

> Configure Microsoft Entra ID Device Integration

The following steps will integrate Microsoft Entra ID by using an Enterprise Application / Application Registration with the below API permissions. Currently setup is limited to using a Service Principal Name (SPN) with a client id, client secret, tenant id, and domain.

## Required Permissions

| API             | Permissions Name   | Type        | Description         | Admin Consent Required |
| --------------- | ------------------ | ----------- | ------------------- | ---------------------- |
| Microsoft Graph | Directory.Read.All | Application | Read directory data | Yes                    |

## Setting Up Microsoft Entra ID Device Integration

In Tier Zero Code, go to “Integrations” and click on the Microsoft Entra ID device integration then enable and configure integration.

<img src="https://mintcdn.com/awbtechllc/4Dy0gD2CjmAlOz7P/images/image.png?fit=max&auto=format&n=4Dy0gD2CjmAlOz7P&q=85&s=abc1c44a82f27af05d94bd46dd75eda4" alt="Image" width="1919" height="922" data-path="images/image.png" />

In the Microsoft Entra ID Configuration, you'll need the following fields:

<ResponseField name="Client ID" type="string" required>
  The application (client) ID from the “Overview” section of your app registration
</ResponseField>

<ResponseField name="Client Secret" type="string" required>
  The client secret value from the “Certificates and secrets” section of your app registration
</ResponseField>

<ResponseField name="Tenant ID" type="string" required>
  The directory (tenant) ID from the “Overview” section of your app registration
</ResponseField>

<ResponseField name="Tenant Domain" type="string" required>
  The primary domain from the "Home" of your Microsoft Entra admin center.
</ResponseField>