Contents x
    Microsoft Entra Application Setup
    • 12 Mar 2025
    • 4 Minutes to read
    • Print
    Contents

    Microsoft Entra Application Setup

    • Updated on 12 Mar 2025
    • 4 Minutes to read
    • Print
    Article summary

    In this Article

    This article provides a step-by-step guide on setting up Microsoft Entra ID, assigning permissions, generating certificates and secrets, and configuring payout settings. It details how Microsoft Entra ID is created and onboarded with the necessary permissions via Partner Center, enabling seamless integration with SaaSify for managing purchases, subscriptions, private offers, insights, onboarding data, payouts, and co-sell functionalities in the Azure Marketplace.

    Create Microsoft Entra Application

    Follow the below steps to create a Microsoft Entra Application in Azure Portal:

    Note:

    To perform the steps mentioned below, the required role on the Azure Management Portal should be Application Developer.

    1. Log in to the Azure Portal

    2. Click on the Microsoft Entra ID menu option.

    3. Click on App registrations from the left menu to get to the list of existing Microsoft Entra applications.

    4. Click the + New registration button in the toolbar to start creating a new Microsoft Entra application.

    5. Provide the Name for the application. For Example: <Customer Company Name>- SaaSify App for Azure Marketplace

    6. Select the option – Accounts in this organizational directory only (<Company Name> – Single tenant)

    7. Click Register

    8. Go to Overview and copy the Application (client) ID and Directory (tenant) ID as these details would be used later to create a Seller Account in SaaSify.

    By following the outlined steps, you will have successfully created a Microsoft Entra Application.

    Assign API Permissions to the Microsoft Entra Application

    Once the Microsoft Entra Application is created, you need to make sure that the required API permissions are assigned to the application. To assign the API Permissions, follow the below steps:

    Note:

    To perform the steps mentioned below, the required role on the Azure Management Portal should be Application Developer

    1. Go inside the Microsoft Entra ID that you created in the previous step

    2. Select the API permissions from the left menu of the Application

    3. Click + Add a permission

    4. Click on the APIs my organization uses tab

    5. Search and Add for the following permissions:

      1. Copy the following application ID: fa3d9a0c-3fb0-42cc-9193-47c7ecd2edbd and then paste it into the search bar.

        1. Click on Microsoft Partner Center and Select the checkbox – user_impersonation

        2. Click Add Permissions to successfully save the permission.

    6. Click + Add a permission

    7. Click on APIs my organization uses tab

    8. Search and Add for the following permissions:

      1. Copy the following application ID: 4990cffe-04e8-4e8b-808a-1175604b879f and then paste it into the search bar.

        1. Click on Microsoft Dev Center and select the checkbox – user_impersonation

        2. Click Add Permissions to successfully save the permission.

    9. Click on Grant admin consent and confirm Yes.

      Note:

      Microsoft Dev Center permission is represented as Microsoft Partner in Azure Portal.

    Therefore, you would have finished assigning the necessary permissions to the Microsoft Entra Application.

    Create Certificates and Secrets

    Once the Microsoft Entra Application is created with the required permissions, we need to create a Client Secret by following the below steps:

    Note:

    To perform the steps mentioned below, the required role on the Azure Management Portal should be Application Developer.

    1. Go inside the Microsoft Entra ID that you created earlier.

    2. Click Certificates & secrets from the left menu.

    3. Click + New client secret.

    4. Provide a description.

    5. The Expires column should be selected as 24 months from the dropdown.

    6. Click on Add.

    7. Record the client secret value created at this time. You will not be able to capture the value once you leave the page as this detail would be needed in configuring the SaaSify.

    Thus, by following the above steps, a Client secret will be created which is an essential part of the configuration of the Microsoft Entra Application.

    Payout Configuration in Azure Portal

    Integrating Payouts with the SaaSify platform enables you to efficiently track receivables and tax details within the Reports section. This feature provides a comprehensive view of transaction statuses, including pending payments, overdue amounts, and completed payouts, all in a single dashboard.

    Additionally, it offers detailed tax breakdowns, specifying who is responsible for tax payments—whether it's the ISV or Microsoft—along with the earnings amount.

    To leverage this functionality, a Microsoft Entra ID application must be created and onboarded with the appropriate permissions via Partner Center. Ensure that you have the necessary rights to create applications before proceeding.

    To complete the Payouts configuration in the Azure Management Portal please follow the below steps:

    Note:

    To perform the steps mentioned below, the required role on the Azure Management Portal should be Application Developer.

    1. Open the Microsoft Entra App ID that you created earlier.

    2. In the "Overview" section, select "Add a Redirect URI"

    3. Ensure that the option "Accounts in this organizational directory only (<Company Name> -Single tenant)” is chosen under "Supported account types."

    4. In the "Platform configurations" section, select "Add a platform."

    5. Choose "Web" from the options listed under "Configure platforms."

    6. In the "Redirect URI" section, choose "Web" from the dropdown and enter the URI in the following format: https://<Tenant Name>.saasify.ai/mslogin and replace “https://<Tenant Name>.saasify.ai” with your SaaSify Portal URL.

    7. Make sure that the following tokens are enabled under "Implicit grant and hybrid flows."

      1. Access tokens (used for implicit flows.

      2. ID tokens (used for implicit and hybrid flows).

    8. Proceed by clicking on the "Configure" button.

    AMP Setup and Configuration

    Please click here to redirect to the video demonstration of the Azure Marketplace Setup and Configuration.

    Next Step

    • Follow the steps on the next page to Assign Permissions in the Microsoft Partner Center.

    What's Next