# Create and configure a new OAuth app in Microsoft Azure AAD

{% hint style="info" %}
This topic is specific to Microsoft Azure OAuth and not a feature of Jigx. Jigx requires an OAuth app to authenticate with Microsoft Graph.

To successfully complete these steps, you will need a Microsoft Office 365 Administrator account with access to the Azure Active Directory Administration portal.&#x20;
{% endhint %}

1.Login to [https://admin.microsoft.com](https://admin.microsoft.com/)

2\. Expand the menu on the left by clicking on the hamburger icon on the top left of the page.

<figure><img src="/files/FmKwR1ztyeeNW9GtyBzc" alt="Microsoft Admin center" width="375"><figcaption><p>Microsoft Admin center</p></figcaption></figure>

3\. Click on the **three dots** next to Show All.

4\. Click on **Azure Active Directory** under Admin Centers.

<figure><img src="/files/UKTQZBCU7ylXyllYChGE" alt="AAD" width="375"><figcaption><p>AAD</p></figcaption></figure>

5\. In the left menu, click on **Enterprise Applications**.

<figure><img src="/files/aQBDOsHpzH6oDoy20iXG" alt="AAD admin center" width="375"><figcaption><p>AAD admin center</p></figcaption></figure>

6\. Click **New application** on the toolbar in the top middle of the page.

<figure><img src="/files/uiLvZpnahTZuXpC8R05k" alt="New application" width="375"><figcaption><p>New application</p></figcaption></figure>

7\. Click on **Create your own application** on the toolbar at the top of the page.

<figure><img src="/files/OLIWT0Oah6NT0yRlm9pk" alt="New application" width="375"><figcaption><p>New application</p></figcaption></figure>

8\. Enter a name for your app. In this document, we will use Jigx Mobile.

9\. Make sure **Integrate any other application you don't find in the gallery (Non-gallery)** is selected, and click on the **Create** button at the bottom of the screen.

<figure><img src="/files/rYT2KpZmUxWiGdDIrY1E" alt="New application" width="375"><figcaption><p>New application</p></figcaption></figure>

10\. Under Manage, click on **Properties**.

<figure><img src="/files/ipfjS9DoNyf3B9ovKYgc" alt="Properties" width="375"><figcaption><p>Properties</p></figcaption></figure>

11\. Set **Assignment required** to false and click on **Save** on the menu bar at the top left.

<figure><img src="/files/ZpXclRFCW9MgGjTuER3y" alt="New application" width="375"><figcaption><p>New application</p></figcaption></figure>

12\. Click on the **application registration link** at the top right of the page.

13\. Click on **Authentication** in the left menu.

<figure><img src="/files/TfoSvmdKfAbAOCpC5lsH" alt="Authentication" width="375"><figcaption><p>Authentication</p></figcaption></figure>

14\. Click on **Add a platform**.

<figure><img src="/files/Kvb5ng5yHLJMFw7mQHF1" alt="Authentication" width="375"><figcaption><p>Authentication</p></figcaption></figure>

15\. Click on **Mobile and desktop applications**. **Do not** select iOS/macOS or Android.

<figure><img src="/files/EMzvJHzNsO19ShOAg2H9" alt="Applications" width="375"><figcaption><p>Applications</p></figcaption></figure>

16\. Select the **three checkboxes** and add [https://oauth.jigx.com/jigx/](https://oauth.jiigx.com/jigx/) in the custom URL section. If you are configuring this for a Jigx Branded app replace /jigx/ with the name of the branded app as specified in its app configuration. For example, [https://oauth.jigx.com/companyname/. ](https://oauth.jiigx.com/companyname/)Click on **Configure** to save the changes.

<figure><img src="/files/B92AbhALYrY8iAJAdTLm" alt="Redirect URLs" width="375"><figcaption><p>Redirect URLs</p></figcaption></figure>

If you are planning on using **Postman** to test calls to Microsoft Graph using the Jigx Mobile OAuth configuration, click on Add URI and add the following URL: <https://oauth.pstmn.io/v1/callback> then click on **Save** at the bottom of the screen.

17\. Click on **API permissions**. Depending on the functionality you want to expose to Jigx Mobile, you will have to specify specific API permissions, also referred to as scopes.

<figure><img src="/files/U3JbPwfiQzFWIutH3wQp" alt="Scopes" width="375"><figcaption><p>Scopes</p></figcaption></figure>

18\. For this example, click on **Add a permission** and then **Microsoft Graph** at the top of the next screen.

<figure><img src="/files/ZD5le4Qnx8uy9PWyRmvf" alt="API permissions" width="375"><figcaption><p>API permissions</p></figcaption></figure>

19\. Click on **Delegated permissions** since we want the Jigx solution user to access the API using his identity and access rights.

<figure><img src="/files/gbtC9qLf7gTZunBUQfOP" alt="API permissions" width="375"><figcaption><p>API permissions</p></figcaption></figure>

20\. Enable **email, openid, profile and User.Read, offline\_access**. These are the minimum scopes needed by Jigx to access the API. **To find User.Read,** enter it in the search box. Click on **Add permissions** at the bottom of the screen.

<figure><img src="/files/352KFWjv5ZEvJrdfih3Y" alt="API permissions" width="375"><figcaption><p>API permissions</p></figcaption></figure>

21\. Click on **Grant admin consent** on the toolbar above the API permissions. Your API permissions should look similar to the image below.

<figure><img src="/files/hxbWP1urWcPShybaVcz2" alt="API permissions"><figcaption><p>API permissions</p></figcaption></figure>

22\. Click on **Overview** on the top left.

<figure><img src="/files/DPPuVMeyeJdhWiD7Sizf" alt="API permissions overview" width="375"><figcaption><p>API permissions overview</p></figcaption></figure>

23\. Copy the **Application (Client) ID** and save this for later.

<figure><img src="/files/BkfBQxXmCWsWq0RVjOdf" alt="Application ID" width="375"><figcaption><p>Application ID</p></figcaption></figure>

24\. Click on **Endpoints** in the toolbar. Select the **portion of the URL** up to the / after v2.0 of the OpenID Connect metadata document field and save this for later.

<figure><img src="/files/85fX7JTJ4Qr33a7KlFAi" alt="Endpoints"><figcaption><p>Endpoints</p></figcaption></figure>

25\. At this stage, the **OAuth app** is configured and ready to use.

In the next section, add the configuration to the Jigx solution in Jigx Management.


---

# Agent Instructions: Querying This Documentation

If you need additional information that is not directly available in this page, you can query the documentation dynamically by asking a question.

Perform an HTTP GET request on the current page URL with the `ask` query parameter:

```
GET https://docs.jigx.com/building-apps-with-jigx/data/data-providers/rest/microsoft-graph-oauth/configuring-oauth-for-ms-graph/create-and-configure-a-new-oauth-app-in-microsoft-azure-aad.md?ask=<question>
```

The question should be specific, self-contained, and written in natural language.
The response will contain a direct answer to the question and relevant excerpts and sources from the documentation.

Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.
