Azure AD Setup Guide

This guide walks you through creating an Microsoft Entra ID app registration to connect fixSignatures with your Microsoft 365 tenant.

Why Microsoft Entra ID Connection is Required

fixSignatures needs to connect to your Microsoft 365 tenant to:

• Sync user directory information (names, job titles, departments, contact details)
• Read Microsoft Entra ID group memberships for signature assignment
• Populate signature templates with personalized user data

Step 1: Access Azure Portal

1. Go to portal.azure.com
2. Sign in with your Microsoft 365 administrator account
3. Navigate to Microsoft Entra ID (formerly Microsoft Entra ID)

Step 2: Create App Registration

1. In the left sidebar, click App registrations
2. Click + New registration
3. Enter a name for the application (e.g., “fixSignatures”)
4. For Supported account types, select “Accounts in this organizational directory only”
5. Leave Redirect URI blank (not needed)
6. Click Register

After registration, you’ll see the app’s Overview page. Note down the following values:

• Application (client) ID – This is your Client ID
• Directory (tenant) ID – This is your Tenant ID

Step 3: Create Client Secret

1. In your app registration, click Certificates & secrets in the left sidebar
2. Click + New client secret
3. Enter a description (e.g., “fixSignatures API access”)
4. Choose an expiration period (we recommend 24 months)
5. Click Add
6. Immediately copy the Value – this is your Client Secret and will only be shown once!

Step 4: Add API Permissions

1. In your app registration, click API permissions in the left sidebar
2. Click + Add a permission
3. Select Microsoft Graph
4. Select Application permissions
5. Search for and add the following permissions:

Permission	Purpose
User.Read.All	Read user profiles (names, job titles, contact info)
Group.Read.All	Read group memberships for signature assignment

Step 5: Grant Admin Consent

After adding permissions, you must grant admin consent:

1. On the API permissions page, click Grant admin consent for [Your Organization]
2. Click Yes to confirm
3. Verify that all permissions show a green checkmark under “Status”

Step 6: Configure fixSignatures

Now enter your credentials in fixSignatures:

1. Log in to your fixSignatures dashboard
2. Navigate to Settings → Microsoft 365 Setup
3. Click Edit in the Microsoft Entra ID Configuration section
4. Enter your Tenant ID
5. Enter your Client ID
6. Enter your Client Secret
7. Optionally set Allowed Domains to filter which email domains are synced
8. Click Save

Step 7: Test the Connection

1. On the Microsoft 365 Setup page, click Test Connection
2. You should see “Connected to Microsoft 365” with a green checkmark
3. Click Sync Users Now to perform your first user sync

Troubleshooting

“Insufficient privileges” error

This means admin consent hasn’t been granted. Return to the Azure Portal and click “Grant admin consent” on the API permissions page.

“Invalid client secret” error

The client secret may have expired or been entered incorrectly. Create a new client secret in Azure Portal and update it in fixSignatures.

“Invalid tenant ID” error

Double-check that you’ve copied the Directory (tenant) ID correctly from the app registration overview page.

Users not syncing

If users aren’t appearing after sync:

• Check the “Allowed Domains” setting – users outside these domains won’t sync
• Ensure users have valid email addresses in Microsoft Entra ID
• Verify the User.Read.All permission is granted

For more troubleshooting help, see Microsoft Entra ID Connection Issues.