# Authorization code
## Introduction
This walkthrough details the process of registering a Microsoft Entra ID application, granting it high-level API permissions, and securely connecting it to the Mindflow platform based on the provided documentation.
## Registering the Application in Azure
1. To establish an identity for the integration, you must first register the application within your Microsoft Entra tenant.
2. **Navigate to App Registrations**: In the Microsoft Azure portal, go to Microsoft Entra ID directory and select **App registrations** from the sidebar.
3. **Create New Registration**: Click on **+ New registration.**
4. **Configure Application Settings**:
1. **Name**: Enter a display name, such as "**TEST**".
2. **Supported Account Types**: Select **Accounts in this organizational directory only (Single tenant)**.
5. **Complete Registration**: Click **Register**. Once created, note the **Application (client) ID** and **Directory (tenant) ID** from the **Essentials** section for later use.
## Configuring API Permissions
1. Explicitly grant permissions to allow the app to interact with Microsoft Graph data.
2. **Access Permissions Menu**: From the application sidebar, select **API permissions**.
3. **Choose Permission Type**: Select Delegated permissions. This is used for services requiring the sign in of a user.
4. **Select Specific Scopes**:
1. Search for and select required permissions such as **Files.Read.All**, **Files.ReadWrite**, and **Files.ReadWrite.All**.
1. Add **offline_access** to maintain access to data.
5. **Grant Admin Consent**: Initially, the status will show as not granted.
6. Click **Grant admin consent** and confirm to authorize these permissions for the entire tenant. A success message will appear once completed.
## Generating Authentication Credentials
1. Generate a client secret to allow Mindflow to authenticate as this application.
2. **Create Secret**: Navigate to **Certificates & secrets** and click **+ New client secret**.
3. **Set Expiration**: Provide a description (e.g., "**TEST**") and choose an expiration period, such as the recommended **180 days**.
4. **Secure the Value**: Immediately copy the **Secret Value**.
:::note
Note: This value is hidden after you leave the page. Store it safely as it is required for the credential configuration on Mindflow.
:::
## Configuring redirect URL
1. To allow the app to properly redirect to Mindflow to allows users to approve the delegation of permissions to the App navigate to Overview then click `Redirect URLs`
2. Click Add, select Web as platform and within the placeholder, write down `https://credentials-{your-mindflow-env}.mindflow.io/oauth2/callback`
3. Click configure
## Integrating with Mindflow
1. Use the gathered Azure details to create a functional credential within Mindflow.
2. **Start Credential Creation**: In Mindflow, select the appropriate service, such as **Microsoft Graph - Files**.
3. **Configure Connection**: Fill in the following details in Mindflow:
1. **Credential Name**: e.g., "Microsoft Graph - Files credential".
2. **Credential Type**: Select **OAuth 2.0 Authorization Code**.
1. **Client ID**: Paste the **Application (client) ID** from Phase 1.
2. **Client Secret**: Paste the **Secret Value** generated in Phase 3.
3. **Callback URL**: Ensure this matches the **Redirect URI** configured in Azure (e.g., `https://credentials-{tenant}.mindflow.io/oauth2/callback`).
4. **Endpoints**: Use the provided OAuth 2.0 authorization and token endpoints, replacing `{tenant-id}` with your actual Directory ID.
1. **Set Scopes**: Under **Advanced settings**, enter the required scopes, such as `offline_access https://graph.microsoft.com/.default`.
4. **Authorize**: Click **Authorize and create**. You will be prompted to sign in and accept the requested permissions for your organization.
5. A successful integration will result in an "**Authorization Successful!**" message.
