Configure MPIP Delegated User application registration in Microsoft Entra
Mike Miller
32 steps
8 minutes
Microsoft Entra
1
Navigate to [https://entra.microsoft.com/#view/Microsoft_AAD_IAM/EntraHome.ReactView](https://entra.microsoft.com/#view/Microsoft_AAD_IAM/EntraHome.ReactView)
2
Click "Applications"
3
Click "App registrations"
4
Click "New registration"
5
Provide your desired app name
6
Click the redirect URI drop-down
7
Click "Web"
8
Provide the local host redirect URI
9
Click "Register"
10
Copy the entire APP ID
11
Copy your entire tenant ID
12
Click "Certificates & secrets"
13
Click "New client secret"
14
Provide a name for the secret
15
Change the expiration option to at least 1 year
16
Click here.
17
Copy the entire secret value. YOU WILL NOT BE ABLE TO GET THIS LATER
18
Click "API permissions"
19
Click "Add a permission"
20
Click "Azure Rights Management Services"
21
Click "Application permissions"
22
Enable "Content.DelegatedReader"
23
Enable "Content.DelegatedWriter"
24
Click "Add permissions"
25
Click "Add a permission"
26
Click "APIs my organization uses"
27
Search for and select "Microsoft Information Protection Sync Service"
28
Click "Application permissions"
29
Enable "UnifiedPolicy.Tenant.Read"
30
Click "Add permissions"
31
Click "Grant admin consent for <Tenant name>"
32
Click "Yes"
Configure MPIP Delegated User application registration in Microsoft Entra
Mike Miller
32 steps
8 minutes
Microsoft Entra
1
Navigate to [https://entra.microsoft.com/#view/Microsoft_AAD_IAM/EntraHome.ReactView](https://entra.microsoft.com/#view/Microsoft_AAD_IAM/EntraHome.ReactView)
2
Click "Applications"
3
Click "App registrations"
4
Click "New registration"
5
Provide your desired app name
6
Click the redirect URI drop-down
7
Click "Web"
8
Provide the local host redirect URI
9
Click "Register"
10
Copy the entire APP ID
11
Copy your entire tenant ID
12
Click "Certificates & secrets"
13
Click "New client secret"
14
Provide a name for the secret
15
Change the expiration option to at least 1 year
16
Click here.
17
Copy the entire secret value. YOU WILL NOT BE ABLE TO GET THIS LATER
18
Click "API permissions"
19
Click "Add a permission"
20
Click "Azure Rights Management Services"
21
Click "Application permissions"
22
Enable "Content.DelegatedReader"
23
Enable "Content.DelegatedWriter"
24
Click "Add permissions"
25
Click "Add a permission"
26
Click "APIs my organization uses"
27
Search for and select "Microsoft Information Protection Sync Service"
28
Click "Application permissions"
29
Enable "UnifiedPolicy.Tenant.Read"
30
Click "Add permissions"
31
Click "Grant admin consent for <Tenant name>"
32
Click "Yes"
