--- title: Microsoft Entra/ Azure AD Application Setup description: This article will walk you through the steps to configure an Entra (formerly Azure/ Active Directory) Application and configure your Protected Area to use the application for authentication. --- [Skip to content](https://support.catapultcms.com/microsoft-sso-groups#main-content) English Show submenu for translations [Submit a Ticket](https://support.catapultcms.com/kb-tickets/new?hsLang=en) [![catapult-cms-logotype](https://support.catapultcms.com/hs-fs/hubfs/catapult-cms-logotype.png?width=300&height=59&name=catapult-cms-logotype.png)](https://support.catapultcms.com/migration?hsLang=en) Open main navigation Close main navigation - English Show submenu for translations - [Submit a Ticket](https://support.catapultcms.com/kb-tickets/new) - [CatapultCMS.com](https://catapultcms.com/) [CatapultCMS.com](https://catapultcms.com/) Welcome to Catapult Support Knowledge Base! - There are no suggestions because the search field is empty. 1. [CatapultCMS Help](https://support.catapultcms.com/?hsLang=en) 2. [CMS](https://support.catapultcms.com/cms?hsLang=en) 3. [Configuration](https://support.catapultcms.com/cms?hsLang=en#configuration) # Microsoft Entra/ Azure AD Application Setup ## This article will walk you through the steps to configure an Entra (formerly Azure/ Active Directory) Application and configure your Protected Area to use the application for authentication. #### You will need to configure your Microsoft Entra account if you would like to use Microsoft Entra groups to restrict access to your password protected site. For applying Microsoft login to Catapult Users please visit:   #### ![:blue\_book:](https://pf-emoji-service--cdn.us-east-1.prod.public.atl-paas.net/standard/caa27a19-fc09-4452-b2b4-a301552fd69c/64x64/1f4d8.png) Create the Application 1. **Log In To the Azure Portal, and then into the Azure Active Directory section.** ![01-login](https://support.catapultcms.com/hs-fs/hubfs/01-login.png?width=688&height=331&name=01-login.png) ![](blob:https://catapultk12.atlassian.net/ecc8074e-cfba-4601-80c8-0e5b1f52a052#media-blob-url=true&id=96e2e293-5e2b-49fc-a83e-9a0e0044af5e&collection=contentId-1607270401&contextId=1607270401&mimeType=image%2Fpng&name=Step%201.png&size=94699&width=461&height=222&alt=) 2. **Select “App Registrations” to add/edit Applications.** ![](blob:https://catapultk12.atlassian.net/ce8b445c-77d5-4c0a-addc-09da6156cd83#media-blob-url=true&id=f24a50c8-1997-43c6-a9ea-5ecc201d5543&collection=contentId-1607270401&contextId=1607270401&mimeType=image%2Fpng&name=Step%202.png&size=146151&width=461&height=222&alt=)![step2](https://support.catapultcms.com/hs-fs/hubfs/step2.png?width=688&height=331&name=step2.png) 3. **Select “New Registration” to add a new Application.** ![step3](https://support.catapultcms.com/hs-fs/hubfs/step3.png?width=688&height=331&name=step3.png) ![](blob:https://catapultk12.atlassian.net/634ce5fa-1db6-48f8-aa8a-fbf75b75880c#media-blob-url=true&id=de17ef2f-739e-470a-96f3-ff83d03370da&collection=contentId-1607270401&contextId=1607270401&mimeType=image%2Fpng&name=Step%203.png&size=105776&width=461&height=222&alt=) 4. **Register the Application by filling out the form.** ![step 5](https://support.catapultcms.com/hs-fs/hubfs/step%205.png?width=688&height=700&name=step%205.png) ![](blob:https://catapultk12.atlassian.net/e561e52e-8ecd-4ea8-b59f-accb965826cb#media-blob-url=true&id=348723b2-6789-44f0-bcc8-30cff1773929&collection=contentId-1607270401&contextId=1607270401&mimeType=image%2Fpng&name=Step%205.png&size=57434&width=218&height=222&alt=) 1. The **Name** of the application can be whatever you like. 2. For **Supported Account Types**, please select “Accounts in any organizational directory (Any Azure directory - Multitenant)”. 3. For **Redirect URI** please select “Web”, and then enter the redirect URI given to you by CatapultK12 #### ![:blue\_book:](https://pf-emoji-service--cdn.us-east-1.prod.public.atl-paas.net/standard/caa27a19-fc09-4452-b2b4-a301552fd69c/64x64/1f4d8.png) Configure the Application The application has been created, now it needs to be configured. 1. Note the **Application (client) ID**, the Protected Area system will be asking for it. 2. Set up a new Secret by selecting “Certificate & Secrets” ![application ID](https://support.catapultcms.com/hs-fs/hubfs/application%20ID.png?width=688&height=331&name=application%20ID.png) ![](blob:https://catapultk12.atlassian.net/ec595071-401f-45a7-8cf9-f006c19d856f#media-blob-url=true&id=6db75a83-0f68-468a-9ad8-566f6a366edb&collection=contentId-1607270401&contextId=1607270401&mimeType=image%2Fpng&name=Step%206.png&size=155282&width=461&height=222&alt=) 3. Create a new Client Secret by selecting “New client secret” ![new client secret](https://support.catapultcms.com/hs-fs/hubfs/new%20client%20secret.png?width=688&height=331&name=new%20client%20secret.png) ![](blob:https://catapultk12.atlassian.net/be6f915e-8062-4281-9f88-9977e55016f4#media-blob-url=true&id=ff0563eb-5e0f-4adb-8a1a-39dd6509c899&collection=contentId-1607270401&contextId=1607270401&mimeType=image%2Fpng&name=Step%207.png&size=92684&width=461&height=222&alt=) 4. Fill out the “Add a client secret form” ![add client secret](https://support.catapultcms.com/hs-fs/hubfs/add%20client%20secret.png?width=688&height=331&name=add%20client%20secret.png) ![](blob:https://catapultk12.atlassian.net/a2f1ef73-7981-4f9e-98be-66ef5e18cea6#media-blob-url=true&id=0b1624c8-6067-42ac-8432-1aeb80cbc597&collection=contentId-1607270401&contextId=1607270401&mimeType=image%2Fpng&name=Step%208.png&size=106474&width=461&height=222&alt=) 1. **Description** can be anything you like. 2. **Expires** can be anything you are comfortable with, but a new secret will need to be generated and configured before this one expires. 5. Note the **Client Secret Value**, as the Protected Area system will be requesting it. ![step 5 Client Secret Value](https://support.catapultcms.com/hs-fs/hubfs/step%205%20Client%20Secret%20Value.png?width=688&height=331&name=step%205%20Client%20Secret%20Value.png) ![](blob:https://catapultk12.atlassian.net/d7090f0a-b261-4b19-80d5-c5b4ce74aa6f#media-blob-url=true&id=0598e554-bf5d-4ca2-917b-a1e1258828a4&collection=contentId-1607270401&contextId=1607270401&mimeType=image%2Fpng&name=Step%209.png&size=94752&width=461&height=222&alt=) #### ![:blue\_book:](https://pf-emoji-service--cdn.us-east-1.prod.public.atl-paas.net/standard/caa27a19-fc09-4452-b2b4-a301552fd69c/64x64/1f4d8.png) Configuring the Application for Groups If you are going to be handling access with groups, please follow the steps below to configuration your application to have group read permissions. 1. Go back to the main configuration screen for the Application and select “API permissions”. ![groups 1. Application Client ID](https://support.catapultcms.com/hs-fs/hubfs/groups%201.%20Application%20Client%20ID.png?width=688&height=331&name=groups%201.%20Application%20Client%20ID.png) ![](blob:https://catapultk12.atlassian.net/bb79c4ec-7c8c-4442-a807-18b21fb542da#media-blob-url=true&id=6db75a83-0f68-468a-9ad8-566f6a366edb&collection=contentId-1607270401&contextId=1607270401&mimeType=image%2Fpng&name=Step%206.png&size=155282&width=461&height=222&alt=) 2. Add a new permission by selecting “Add a permission”. ![Groups 2.add a permission](https://support.catapultcms.com/hs-fs/hubfs/Groups%202.add%20a%20permission.png?width=688&height=331&name=Groups%202.add%20a%20permission.png) ![](blob:https://catapultk12.atlassian.net/a7e32359-ac81-41ba-98fe-421ee0d3b58d#media-blob-url=true&id=bcff94a9-0846-40e0-aa9a-af1f4595b99f&collection=contentId-1607270401&contextId=1607270401&mimeType=image%2Fpng&name=Step%2010.png&size=97665&width=461&height=222&alt=) 3. Fill out the “Request API permissions” form. 1. For **Select an API,** select “Microsoft Graph” ![groups 3. Microsoft Graph](https://support.catapultcms.com/hs-fs/hubfs/groups%203.%20Microsoft%20Graph.png?width=688&height=331&name=groups%203.%20Microsoft%20Graph.png) ![](blob:https://catapultk12.atlassian.net/ba373b6d-844d-4d88-97e5-0ee048e7bb7e#media-blob-url=true&id=6781b239-4790-4a69-802b-f61755940dd8&collection=contentId-1607270401&contextId=1607270401&mimeType=image%2Fpng&name=Step%2011.png&size=176835&width=461&height=222&alt=) 2. For **What type of permissions does your application require?** select “Delegated permissions”. ![groups 3. Microsoft Graph](https://support.catapultcms.com/hs-fs/hubfs/groups%203.%20Microsoft%20Graph.png?width=688&height=331&name=groups%203.%20Microsoft%20Graph.png) ![](blob:https://catapultk12.atlassian.net/9e78c028-051b-42d7-be00-9e4ea15f0718#media-blob-url=true&id=01f7a2a6-aab7-4f60-a593-0c2384ccb162&collection=contentId-1607270401&contextId=1607270401&mimeType=image%2Fpng&name=Step%2012.png&size=123035&width=461&height=222&alt=) 3. For **Select permissions**, type “Group.Read.All”, or select “Group → Group.Read.All”. ![groups 5. group read all](https://support.catapultcms.com/hs-fs/hubfs/groups%205.%20group%20read%20all.png?width=688&height=331&name=groups%205.%20group%20read%20all.png) ![](blob:https://catapultk12.atlassian.net/389cc916-747a-4928-b960-f9f491878347#media-blob-url=true&id=a657c8b5-fc14-4daa-bdd7-d80731e12613&collection=contentId-1607270401&contextId=1607270401&mimeType=image%2Fpng&name=Step%2013.png&size=147720&width=461&height=222&alt=) 4. The Group.Read.All permissions will require Administrative Consent. Click “Grant admin consent for …” to give consent. ![groups 6. group grant admin](https://support.catapultcms.com/hs-fs/hubfs/groups%206.%20group%20grant%20admin.png?width=688&height=331&name=groups%206.%20group%20grant%20admin.png) ![](blob:https://catapultk12.atlassian.net/fe6af2ac-028f-4be3-ab2a-1dd0fa2cab6a#media-blob-url=true&id=537856f1-1d30-4f75-b92e-01b48819d789&collection=contentId-1607270401&contextId=1607270401&mimeType=image%2Fpng&name=Step%2014.png&size=105463&width=461&height=222&alt=) 5. Select “Yes” in the “Grant admin consent confirmation” dialog to finish setting up the permissions. ![groups 7. yes in grant admin](https://support.catapultcms.com/hs-fs/hubfs/groups%207.%20yes%20in%20grant%20admin.png?width=688&height=331&name=groups%207.%20yes%20in%20grant%20admin.png) - [CMS](https://support.catapultcms.com/cms?hsLang=en#main-content) - [Getting Started with Catapult CMS](https://support.catapultcms.com/cms?hsLang=en#getting-started-with-catapult-cms) - [The Dashboard](https://support.catapultcms.com/cms?hsLang=en#the-dashboard) - [General Editing Information](https://support.catapultcms.com/cms?hsLang=en#general-editing-information) - [Basic Elements](https://support.catapultcms.com/cms?hsLang=en#basic-elements) - [Visual Elements](https://support.catapultcms.com/cms?hsLang=en#visual-elements) - [File Management](https://support.catapultcms.com/cms?hsLang=en#file-management) - [Integrations](https://support.catapultcms.com/cms?hsLang=en#integrations) - [Compliance](https://support.catapultcms.com/cms?hsLang=en#compliance) - [Configuration](https://support.catapultcms.com/cms?hsLang=en#configuration) - [Implementation](https://support.catapultcms.com/cms?hsLang=en#implementation) - [Connect](https://support.catapultcms.com/connect?hsLang=en#main-content) - [Manage Users](https://support.catapultcms.com/connect?hsLang=en#manage-users) - [SIS Configuration](https://support.catapultcms.com/connect?hsLang=en#sis-configuration) - [Dashboard](https://support.catapultcms.com/connect?hsLang=en#dashboard) - [Other](https://support.catapultcms.com/connect?hsLang=en#other) - [Organization & Site Resources](https://support.catapultcms.com/connect?hsLang=en#organization-site-resources) - [Messages](https://support.catapultcms.com/connect?hsLang=en#messages) - [Emergency Resources](https://support.catapultcms.com/connect?hsLang=en#emergency-resources) - [Implementation](https://support.catapultcms.com/connect?hsLang=en#implementation) - [APP](https://support.catapultcms.com/app?hsLang=en#main-content) - [App Management](https://support.catapultcms.com/app?hsLang=en#app-management) - [What's New](https://support.catapultcms.com/whats-new?hsLang=en#main-content) - [What's new at CatapultCMS](https://support.catapultcms.com/whats-new?hsLang=en#whats-new-at-catapultcms) - [Contact Us](https://support.catapultcms.com/contact-us?hsLang=en) - [Incident Report](https://support.catapultcms.com/incident-report?hsLang=en) - [Implementation](https://support.catapultcms.com/implementation?hsLang=en#main-content) - [Professional Add-On Services](https://support.catapultcms.com/implementation?hsLang=en#professional-add-on-services) [![catapult-cms-logotype](https://support.catapultcms.com/hs-fs/hubfs/catapult-cms-logotype.png?width=250&height=49&name=catapult-cms-logotype.png "catapult-cms-logotype")](https://catapultcms.com/) [CatapultCMS.com](https://catapultcms.com/) [CMS Login](https://www.catapultcms.com/Login.aspx) [CONNECT Login](https://www.catapult-connect.com/Account/Login?ReturnUrl=%2F) Copyright © 2026, CatapultCMS