Configuring prerequisites

Since the HTTP flow that we’re going to configure doesn’t have a way to enter a traditional username and password as the authentication mechanism, we’re going to create or register a special application with the appropriate permissions.

In addition, you’ll also need to configure a client secret, which is the application’s equivalent to a password. Together, the tenant information, application information, and client secret will be used to provide the necessary authentication to execute the flow.

Configuring an Azure AD application

To register a new Azure AD application for this flow, follow these steps:

1. Log in to the Azure AD portal (https://portal.azure.com) using an identity with global administrator privileges.
2. In the search bar, search for App registrations and select it:

Figure 15.1: Navigating the Azure portal

3. Click New registration:

Figure 15.2: Creating...