Before you Start

Before starting there are a few things you will need:​

• Admin access to your Microsoft Entra ID (Azure) environment.​
• Account Admin access to your Maptician environment.  This only applies if you are configuring the integration on your own without assistance from Maptician.​

Getting Started

Step 1: Open Your Microsoft Azure Account Portal

Open your Microsoft Azure Account Portal and select “Azure Active Directory”.​  

Step 2: Accessing App Registrations for Maptician Configuration

From your Azure Active Directory home screen, select “App registrations” in the left navigation menu. Maptician will be configured within Azure as a background service or “daemon”.​

App registrations are where we create credentials that allow Maptician to access the Microsoft Graph API for IP presence.​

Step 3: Initiating a New App Registration

In the App registrations, press the​ “New registration” button.​

Step 4: Registering the Maptician Application

In the “Register an application” form dialog, make the following entries:​

• Create a name for the app (Maptician or Maptician Graph API are recommended)​
• Ensure that the supported account types are “Single Tenant”.​

Once these are complete, press the “Register”​ button to create the app object.​

Step 5: Copying App and Tenant ID Values and Navigating to API Permissions

After the app has been created, copy the “Application (client) ID value” and the “Directory (tenant) ID value”.​

These will be entered in Maptician’s desktop app. Then navigate to “API permissions” in the left navigation menu.​

Step 6: Removing Default Permissions

By default, the app includes permission to read user profiles (in delegated mode).​

• Click on the actions button (three dots) to the right of this permission entry​
• Delete this permission​

Step 7: Adding New API Permissions

Once the permissions list is empty, press the “Add a permission” button to create the necessary permissions for this app., which is “User.Read.All”

Step 8: Configuring Microsoft Graph API Permissions

In the Add permissions interface:​

• Select the “Microsoft Graph” API button​

• Then select “Application permissions” as the type of permissions to be added​

Step 9: Selecting and Adding Required Permissions

In the Add permissions interface:​

• Under User, select “User.Read.All”​

Once this permission has been added, press the “Add permissions” button at the bottom of the interface.​

Step 10: Granting Admin Consent for API Permissions

Adding these permissions requires consent from your Azure administrator. If you are the​ administrator, press the “Grant admin consent for Maptician” button, or ask your administrator to grant consent through their account.​

Step 11: Create a New Client Secret

Once the permissions have been granted:

• ​Select “Certificates & secrets” from the left navigation menu​
• Then press the “New client secret” button​

This opens a dialog allowing you to create a client secret that will be used by Maptician to sync information.​

Enter a description for the key. If you plan on rotating the key, it may be useful to indicate a date or version of the secret being created.

You can change the expiration date of the secret which will determine how long the secret is valid for.  Maptician recommends setting the expiration date to 24 months if your company's IT policies allow for this. Please note that if the secret expires, Maptician will no longer be able to sync or access any data.  It is important to rotate to a new secret prior to the expiration date. ​

Once these have been set, press the “Add” button.​

Step 12: Storing the Client Secret Values

You will see the new secrets added to the Client Secrets section. Use the copy buttons for both the Secret Value and Secret ID and store these with the values from your app home screen.​

Step 13: Configure Connection Settings in Maptician

These values can be entered in Maptician’s Settings interface, under the Environment > Office 365 Integration menu. From there you will want to press “Add” to create a new connection.

From there you will be shown a popup named “Add New Microsoft Connection”. Start by giving the connection a name (i.e. “Primary”) and add the Client ID, Tenant ID, Secret ID, and Secret Value that were saved in previous steps. You can also add a date to the “Secret Expiration” field but it is not required. After entering in those values you will want to press “Set” to finish setting up the connection.

You can then click the “Check” button to check the connectivity of the application.​

Step 14: Enabling Microsoft Profile Image Syncing

Once connectivity has been established, for profile images to sync with Maptician, you need to check the box for “Enable Microsoft Profile Image Sync” and then press “SAVE CHANGES”. Once this is done and Azure has had time to sync (this can sometimes take up to 30 minutes), you can click “CHECK CONNECTION”.  Once this is established the sync with Azure will take place daily at 1:00 AM (US/Eastern).​