Skip to main content

How to integrate Microsoft Entra account?

Overview​

To authenticate, you will need to provide the following information:

  • Client ID
  • Client Secret
  • Tenant ID

Step 1: Login to Microsoft Entra (Azure AD) Portal​

  1. Go to Microsoft Azure
  2. Sign in with the Microsoft account that has access to your Teams tenant (typically an admin account).

Step 2: Register Your Application​

  1. Once logged in, select "App registrations" from Azure Services.
  2. Click on "+ New registration".
CrowdStrike API Client Creation
  1. Fill the registration details:
  • Name: Give your app a name (e.g., Demo App)
  • Supported account types: Choose
    • Accounts in any organizational directory (Any Microsoft Entra ID tenant - Multitenant)
  • Redirect URI: Since there is no need for users to sign in to this application directly, you can choose ‘Single-page application (SPA)’ for the redirect URI and leave it blank.
CrowdStrike API Client Creation
  1. Click Register.

Step 3: Get the Client ID and Tenant ID​

  1. After the app is registered, you will land on the app overview page.

  2. Copy the following:

    • Application (client) ID → This is your Client ID
    • Directory (tenant) ID → This is your Tenant ID
    CrowdStrike API Client Creation

Step 4: Generate Client Secret​

  1. Go to Certificates & secrets in the left sidebar
CrowdStrike API Client Creation
  1. Under Client secrets, click + New client secret
  2. Add: - Description: (e.g., App Secret) - Expires: Select an expiration duration (e.g., 6 months or 1 year)
  3. Click Add
  4. Copy the Value immediately — this is your Client Secret

Required Application Permissions​

PermissionsType
AuditLog.Read.AllApplication
Directory.Read.AllApplication
Group.ReadWrite.AllApplication
GroupMember.ReadWrite.AllApplication
User.ReadApplication
User.ReadWrite.AllApplication
UserAuthenticationMethod.ReadWrite.AllApplication

How to Add these Permissions​

  1. Go to API Permissions from left navigation
  2. Click + Add a permission
CrowdStrike API Client Creation
  1. Select:
    • Microsoft Graph
    • Choose:
      • Application permissions for background apps
  2. Add the required permissions listed above and click Add permissions
    CrowdStrike API Client Creation
  3. Click Grant admin consent