What You'll Need
- Global Administrator or Application Administrator role in Microsoft Entra ID
- An active Microsoft 365 subscription
- ~5 minutes to complete setup
- Your Clariti account with adapter management permissions
Get Your Credentials
If you have already set up the Microsoft Entra ID adapter, you can reuse the same app registration — just add the additional API permissions listed below and re-grant admin consent. See the Microsoft Entra ID guide for the full app registration walkthrough.
In the Azure portal, go to App registrations and select your Clariti app. Under API permissions > Add a permission > Microsoft Graph, add these Application permissions:
User.Read.AllOrganization.Read.All
Click Grant admin consent for your tenant. Then go to Certificates & secrets, create a new client secret (or reuse an existing one), and copy its value along with the Application (client) ID and Directory (tenant) ID from the Overview page.
Enter Credentials in Clariti
| Value from vendor console | Paste into Clariti field |
|---|---|
Directory (tenant) ID | Tenant / Directory ID |
Application (client) ID | Client ID |
Client secret value | Client Secret |
Verify Connection
Click Test Connection in Clariti. A successful connection returns a green checkmark. The first data sync typically completes within a few minutes.
Troubleshooting
- 401 Unauthorized — The client secret may have expired. Generate a new secret in Azure and update it in Clariti.
- 403 Forbidden — Ensure admin consent was granted for User.Read.All and Organization.Read.All. Check under Enterprise applications > Clariti > Permissions.
- Timeout — Tenants with many users may take longer for the initial license sync. Clariti retries automatically.