Home
%3CLINGO-SUB%20id%3D%22lingo-sub-740011%22%20slang%3D%22en-US%22%3EImporting%20Apps%20to%20set%20up%20Cloud%20Management%20Gateway%20(CMG)%20for%20Configuration%20Manager%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-740011%22%20slang%3D%22en-US%22%3E%3CP%3E%3CSPAN%20class%3D%22eop%22%20style%3D%22font-family%3A%20inherit%3B%22%3E%3CSPAN%20style%3D%22mso-ascii-font-family%3A%20Calibri%3B%20mso-hansi-font-family%3A%20Calibri%3B%20mso-bidi-font-family%3A%20Calibri%3B%20color%3A%20black%3B%20background%3A%20white%3B%22%3EHi%2C%20my%20name%20is%20Taj%20Mohammed%2C%20I%20am%20a%20PFE%20working%20in%20the%20US%20primarily%20with%20SCCM.%20As%20a%20result%20of%20a%20recent%20engagement%20I%20thought%20I%20would%20%3C%2FSPAN%3E%3C%2FSPAN%3E%3CSPAN%20class%3D%22normaltextrun%22%20style%3D%22font-family%3A%20inherit%3B%22%3E%3CSPAN%20style%3D%22mso-ascii-font-family%3A%20Calibri%3B%20mso-hansi-font-family%3A%20Calibri%3B%20mso-bidi-font-family%3A%20Calibri%3B%20color%3A%20black%3B%20background%3A%20white%3B%22%3Edocument%20and%20share%20the%20process%20required%20to%20properly%20create%2Fregister%20Applications%20in%20the%20Azure%20Portal.%20Then%20import%20them%20successfully%20in%20SCCM.%26nbsp%3B%3C%2FSPAN%3E%3C%2FSPAN%3E%3CSPAN%20class%3D%22eop%22%20style%3D%22font-family%3A%20inherit%3B%22%3E%3CSPAN%20style%3D%22mso-ascii-font-family%3A%20Calibri%3B%20mso-hansi-font-family%3A%20Calibri%3B%20mso-bidi-font-family%3A%20Calibri%3B%20color%3A%20black%3B%20background%3A%20white%3B%22%3E%26nbsp%3B%3C%2FSPAN%3E%3C%2FSPAN%3E%3C%2FP%3E%0A%3CDIV%20class%3D%22WordSection1%22%3E%0A%3CP%20style%3D%22margin%3A%200in%3B%20margin-bottom%3A%20.0001pt%3B%22%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%20style%3D%22margin%3A%200in%3B%20margin-bottom%3A%20.0001pt%3B%22%3E%3CSTRONG%3E%3CSPAN%20style%3D%22font-size%3A%2011.0pt%3B%20font-family%3A%20'Calibri'%2Csans-serif%3B%20mso-bidi-font-family%3A%20Calibri%3B%22%3EBackground%3C%2FSPAN%3E%3C%2FSTRONG%3E%3C%2FP%3E%0A%3CP%20style%3D%22margin%3A%200in%3B%20margin-bottom%3A%20.0001pt%3B%22%3E%3CSPAN%20style%3D%22font-size%3A%2011.0pt%3B%20font-family%3A%20'Calibri'%2Csans-serif%3B%20mso-bidi-font-family%3A%20Calibri%3B%22%3E%26nbsp%3B%3C%2FSPAN%3E%3C%2FP%3E%0A%3CP%20class%3D%22MsoNormal%22%3E%3CSPAN%20class%3D%22normaltextrun%22%3E%3CSPAN%20style%3D%22mso-ascii-font-family%3A%20Calibri%3B%20mso-hansi-font-family%3A%20Calibri%3B%20mso-bidi-font-family%3A%20Calibri%3B%20color%3A%20black%3B%20background%3A%20white%3B%22%3ESCCM%20requires%20someone%20with%20Global%20Admin%20privileges%20to%20Sign%20%3CSPAN%20class%3D%22GramE%22%3EIn%3C%2FSPAN%3E%20from%20SCCM%20Console%20to%20automatically%20register%20Web%2FServer%20and%20Client%2FNative%20Apps%20with%20appropriate%20permissions%20to%20onboard%20AAD.%20This%20is%20a%20pre-requisite%20for%20an%20ARM%20based%20setup%20of%20CMG.%20Although%2C%20using%20Global%20Admin%20privileges%20to%20Sign%20In%20is%20an%20easy%20and%20quick%20way%20to%20register%20the%20Apps%20quite%20often%20SCCM%20admins%20have%20limited%20access%20to%20their%20AAD%20tenants.%20To%20achieve%20application%20registration%20SCCM%20also%20provides%20an%20import%20option%20without%20the%20need%20for%20Global%20Admin%20Access.%3C%2FSPAN%3E%3C%2FSPAN%3E%3C%2FP%3E%0A%3CP%20style%3D%22margin%3A%200in%3B%20margin-bottom%3A%20.0001pt%3B%22%3E%3CSPAN%20style%3D%22font-size%3A%2011.0pt%3B%20font-family%3A%20'Calibri'%2Csans-serif%3B%20mso-bidi-font-family%3A%20Calibri%3B%22%3E%26nbsp%3B%3C%2FSPAN%3E%3C%2FP%3E%0A%3CP%20style%3D%22margin%3A%200in%3B%20margin-bottom%3A%20.0001pt%3B%22%3E%3CSTRONG%3E%3CI%3E%3CSPAN%20style%3D%22font-size%3A%2011.0pt%3B%20font-family%3A%20'Calibri'%2Csans-serif%3B%20mso-bidi-font-family%3A%20Calibri%3B%22%3ENote%3A%20All%20the%20steps%20in%20Azure%20Portal%20need%20to%20be%20performed%20by%20a%20Global%20Admin.%20SCCM%20Steps%20will%20be%20performed%20by%20SCCM%20admin%20except%20step%205.1%20where%20someone%20with%20Owner%20role%20or%20a%20Co-administrator%20assigned%20need%20to%20Sign%20in%20to%20see%20the%20Subscription.%20%3C%2FSPAN%3E%3C%2FI%3E%3C%2FSTRONG%3E%3C%2FP%3E%0A%3CP%20style%3D%22margin%3A%200in%3B%20margin-bottom%3A%20.0001pt%3B%22%3E%3CSTRONG%3E%3CI%3E%3CSPAN%20style%3D%22font-size%3A%2011.0pt%3B%20font-family%3A%20'Calibri'%2Csans-serif%3B%20mso-bidi-font-family%3A%20Calibri%3B%22%3E%26nbsp%3B%3C%2FSPAN%3E%3C%2FI%3E%3C%2FSTRONG%3E%3C%2FP%3E%0A%3CP%20style%3D%22margin%3A%200in%3B%20margin-bottom%3A%20.0001pt%3B%22%3E%3CSPAN%20style%3D%22font-size%3A%2011.0pt%3B%20font-family%3A%20'Calibri'%2Csans-serif%3B%20mso-bidi-font-family%3A%20Calibri%3B%22%3EThe%20blog%20consists%20of%205%20major%20sections%20as%20detailed%20below.%20%3C%2FSPAN%3E%3C%2FP%3E%0A%3CP%20style%3D%22margin%3A%200in%3B%20margin-bottom%3A%20.0001pt%3B%22%3E%3CSPAN%20style%3D%22font-size%3A%2011.0pt%3B%20font-family%3A%20'Calibri'%2Csans-serif%3B%20mso-bidi-font-family%3A%20Calibri%3B%22%3E%26nbsp%3B%3C%2FSPAN%3E%3C%2FP%3E%0A%3CP%20style%3D%22margin%3A%200in%3B%20margin-bottom%3A%20.0001pt%3B%22%3E%3CSPAN%20style%3D%22font-family%3A%20'Calibri'%2Csans-serif%3B%20mso-bidi-font-family%3A%20Calibri%3B%22%3E1.%20Note%20tenant%20details%3C%2FSPAN%3E%3C%2FP%3E%0A%3CP%20style%3D%22margin%3A%200in%3B%20margin-bottom%3A%20.0001pt%3B%22%3E%3CSPAN%20style%3D%22font-family%3A%20'Calibri'%2Csans-serif%3B%20mso-bidi-font-family%3A%20Calibri%3B%22%3E2.%20Registering%20Server%2FWeb%20App%3C%2FSPAN%3E%3C%2FP%3E%0A%3CP%20style%3D%22margin%3A%200in%3B%20margin-bottom%3A%20.0001pt%3B%22%3E%3CSPAN%20style%3D%22font-family%3A%20'Calibri'%2Csans-serif%3B%20mso-bidi-font-family%3A%20Calibri%3B%22%3E3.%20Registering%20Client%2FNative%20App%3C%2FSPAN%3E%3C%2FP%3E%0A%3CP%20style%3D%22margin%3A%200in%3B%20margin-bottom%3A%20.0001pt%3B%22%3E%3CSPAN%20style%3D%22font-family%3A%20'Calibri'%2Csans-serif%3B%20mso-bidi-font-family%3A%20Calibri%3B%22%3E4.%20Importing%20Server%2FWeb%20and%20Client%2FNative%20Apps%3C%2FSPAN%3E%3C%2FP%3E%0A%3CP%20style%3D%22margin%3A%200in%3B%20margin-bottom%3A%20.0001pt%3B%22%3E%3CSPAN%20style%3D%22font-family%3A%20'Calibri'%2Csans-serif%3B%20mso-bidi-font-family%3A%20Calibri%3B%22%3E5.%20Installing%20CMG%3C%2FSPAN%3E%3C%2FP%3E%0A%3CP%20style%3D%22margin%3A%200in%3B%20margin-bottom%3A%20.0001pt%3B%22%3E%3CSPAN%20style%3D%22font-family%3A%20'Calibri'%2Csans-serif%3B%20mso-bidi-font-family%3A%20Calibri%3B%22%3E6.%20Additional%20Requirements%20to%20complete%20the%20setup%3C%2FSPAN%3E%3C%2FP%3E%0A%3CP%20style%3D%22margin%3A%200in%3B%20margin-bottom%3A%20.0001pt%3B%22%3E%3CSPAN%20style%3D%22font-size%3A%2011.0pt%3B%20font-family%3A%20'Calibri'%2Csans-serif%3B%20mso-bidi-font-family%3A%20Calibri%3B%22%3E%26nbsp%3B%3C%2FSPAN%3E%3C%2FP%3E%0A%3CP%20style%3D%22margin%3A%200in%3B%20margin-bottom%3A%20.0001pt%3B%22%3E%3CSPAN%20style%3D%22font-size%3A%2011.0pt%3B%20font-family%3A%20'Calibri'%2Csans-serif%3B%20mso-bidi-font-family%3A%20Calibri%3B%22%3EWe%20will%20be%20using%20the%20new%20and%20improved%20%3CSTRONG%3EApp%20registrations%3C%2FSTRONG%3E%20node%20to%20register%20the%20Apps%20as%20%3CSTRONG%3EApp%20registrations%20(Legacy)%3C%2FSTRONG%3E%20will%20be%20gone%20anytime%20soon.%20%3C%2FSPAN%3E%3C%2FP%3E%0A%3CP%20style%3D%22margin%3A%200in%3B%20margin-bottom%3A%20.0001pt%3B%22%3E%3CSPAN%20style%3D%22font-size%3A%2011.0pt%3B%20font-family%3A%20'Calibri'%2Csans-serif%3B%20mso-bidi-font-family%3A%20Calibri%3B%22%3E%26nbsp%3B%3C%2FSPAN%3E%3C%2FP%3E%0A%3CP%20style%3D%22margin%3A%200in%3B%20margin-bottom%3A%20.0001pt%3B%22%3E%3CSPAN%20style%3D%22font-size%3A%2011.0pt%3B%20font-family%3A%20'Calibri'%2Csans-serif%3B%20mso-bidi-font-family%3A%20Calibri%3B%20mso-no-proof%3A%20yes%3B%22%3E%3CSPAN%20class%3D%22lia-inline-image-display-wrapper%20lia-image-align-inline%22%20style%3D%22width%3A%20662px%3B%22%3E%3CIMG%20src%3D%22https%3A%2F%2Fgxcuf89792.i.lithium.com%2Ft5%2Fimage%2Fserverpage%2Fimage-id%2F122294iE5560925F839246E%2Fimage-dimensions%2F662x266%3Fv%3D1.0%22%20width%3D%22662%22%20height%3D%22266%22%20alt%3D%22image001.png%22%20title%3D%22image001.png%22%20%2F%3E%3C%2FSPAN%3E%3C%2FSPAN%3E%3C%2FP%3E%0A%3CP%20style%3D%22margin%3A%200in%3B%20margin-bottom%3A%20.0001pt%3B%22%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%20style%3D%22margin%3A%200in%3B%20margin-bottom%3A%20.0001pt%3B%22%3E%3CSTRONG%3E%3CSPAN%20style%3D%22font-size%3A%2014.0pt%3B%20font-family%3A%20'Calibri'%2Csans-serif%3B%20mso-bidi-font-family%3A%20Calibri%3B%22%3ECommon%20errors%3A%3C%2FSPAN%3E%3C%2FSTRONG%3E%3C%2FP%3E%0A%3CP%20style%3D%22margin%3A%200in%3B%20margin-bottom%3A%20.0001pt%3B%22%3E%3CSPAN%20style%3D%22font-size%3A%2011.0pt%3B%20font-family%3A%20'Calibri'%2Csans-serif%3B%20mso-bidi-font-family%3A%20Calibri%3B%22%3E%26nbsp%3B%3C%2FSPAN%3E%3C%2FP%3E%0A%3CP%20style%3D%22margin%3A%200in%3B%20margin-bottom%3A%20.0001pt%3B%22%3E%3CSPAN%20class%3D%22normaltextrun%22%3E%3CSPAN%20style%3D%22font-family%3A%20'Calibri'%2Csans-serif%3B%20mso-bidi-font-family%3A%20Calibri%3B%20color%3A%20black%3B%20background%3A%20white%3B%22%3EErrors%20displayed%20when%20the%20Sign%20%3CSPAN%20class%3D%22GramE%22%3EIn%3C%2FSPAN%3E%20User%20account%20is%20not%20a%20Global%20Admin.%3C%2FSPAN%3E%3C%2FSPAN%3E%3C%2FP%3E%0A%3CP%20style%3D%22margin%3A%200in%3B%20margin-bottom%3A%20.0001pt%3B%22%3E%3CSPAN%20style%3D%22font-size%3A%2011.0pt%3B%20font-family%3A%20'Calibri'%2Csans-serif%3B%20mso-bidi-font-family%3A%20Calibri%3B%22%3E%26nbsp%3B%3C%2FSPAN%3E%3C%2FP%3E%0A%3CP%20style%3D%22margin%3A%200in%3B%20margin-bottom%3A%20.0001pt%3B%22%3E%3CI%3E%3CSPAN%20style%3D%22font-size%3A%2011.0pt%3B%20font-family%3A%20'Calibri'%2Csans-serif%3B%20mso-bidi-font-family%3A%20Calibri%3B%22%3EError%3C%2FSPAN%3E%3C%2FI%3E%3CSPAN%20style%3D%22font-size%3A%2011.0pt%3B%20font-family%3A%20'Calibri'%2Csans-serif%3B%20mso-bidi-font-family%3A%20Calibri%3B%22%3E%3A%20%22%3CSTRONG%3EFailed%20to%20Sign%20in%20to%20Azure%3C%2FSTRONG%3E%22%3C%2FSPAN%3E%3C%2FP%3E%0A%3CP%20style%3D%22margin%3A%200in%3B%20margin-bottom%3A%20.0001pt%3B%22%3E%3CI%3E%3CSPAN%20style%3D%22font-size%3A%2011.0pt%3B%20font-family%3A%20'Calibri'%2Csans-serif%3B%20mso-bidi-font-family%3A%20Calibri%3B%22%3ECause%3C%2FSPAN%3E%3C%2FI%3E%3CSPAN%20style%3D%22font-size%3A%2011.0pt%3B%20font-family%3A%20'Calibri'%2Csans-serif%3B%20mso-bidi-font-family%3A%20Calibri%3B%22%3E%3A%20Account%20used%20to%20Sign-In%20is%20not%20a%20Global%20Admin.%20The%20App%20still%20gets%20created%20without%20proper%20configuration%20in%20Azure.%3C%2FSPAN%3E%3C%2FP%3E%0A%3CP%20style%3D%22margin%3A%200in%3B%20margin-bottom%3A%20.0001pt%3B%22%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%20style%3D%22margin%3A%200in%3B%20margin-bottom%3A%20.0001pt%3B%22%3E%3CSPAN%20style%3D%22font-size%3A%2011.0pt%3B%20font-family%3A%20'Calibri'%2Csans-serif%3B%20mso-bidi-font-family%3A%20Calibri%3B%22%3E%3CSPAN%20class%3D%22lia-inline-image-display-wrapper%20lia-image-align-inline%22%20style%3D%22width%3A%20691px%3B%22%3E%3CIMG%20src%3D%22https%3A%2F%2Fgxcuf89792.i.lithium.com%2Ft5%2Fimage%2Fserverpage%2Fimage-id%2F122295i0EEE50B00061C53E%2Fimage-dimensions%2F691x532%3Fv%3D1.0%22%20width%3D%22691%22%20height%3D%22532%22%20alt%3D%22image003.png%22%20title%3D%22image003.png%22%20%2F%3E%3C%2FSPAN%3E%3C%2FSPAN%3E%3C%2FP%3E%0A%3CP%20style%3D%22margin%3A%200in%3B%20margin-bottom%3A%20.0001pt%3B%22%3E%3CSPAN%20style%3D%22font-size%3A%2011.0pt%3B%20font-family%3A%20'Calibri'%2Csans-serif%3B%20mso-bidi-font-family%3A%20Calibri%3B%22%3E%26nbsp%3B%3C%2FSPAN%3E%3C%2FP%3E%0A%3CP%20style%3D%22margin%3A%200in%3B%20margin-bottom%3A%20.0001pt%3B%22%3E%3CI%3E%3CSPAN%20style%3D%22font-size%3A%2011.0pt%3B%20font-family%3A%20'Calibri'%2Csans-serif%3B%20mso-bidi-font-family%3A%20Calibri%3B%22%3EError%3C%2FSPAN%3E%3C%2FI%3E%3CSPAN%20style%3D%22font-size%3A%2011.0pt%3B%20font-family%3A%20'Calibri'%2Csans-serif%3B%20mso-bidi-font-family%3A%20Calibri%3B%22%3E%3A%20%22%3CSTRONG%3EAnother%20object%20with%20the%20same%20value%20for%20property%20%3CSPAN%20class%3D%22SpellE%22%3EidentifierUris%3C%2FSPAN%3E%20already%20exists.%20For%20more%20details%20you%20can%20refer%20to%20the%20%3CSPAN%20class%3D%22SpellE%22%3EAdminUILog%3C%2FSPAN%3E%3C%2FSTRONG%3E%22%3C%2FSPAN%3E%3C%2FP%3E%0A%3CP%20style%3D%22margin%3A%200in%3B%20margin-bottom%3A%20.0001pt%3B%22%3E%3CI%3E%3CSPAN%20style%3D%22font-size%3A%2011.0pt%3B%20font-family%3A%20'Calibri'%2Csans-serif%3B%20mso-bidi-font-family%3A%20Calibri%3B%22%3ECause%3C%2FSPAN%3E%3C%2FI%3E%3CSPAN%20style%3D%22font-size%3A%2011.0pt%3B%20font-family%3A%20'Calibri'%2Csans-serif%3B%20mso-bidi-font-family%3A%20Calibri%3B%22%3E%3A%20This%20usually%20happens%20if%20you%20are%20attempting%20to%20Sign-in%20again%20after%20getting%20the%20above%20(%22Failed%20to%20Sign%20in%20to%20Azure%22)%20error.%20This%20is%20really%20saying%20App%20already%20exists%20in%20Azure.%3C%2FSPAN%3E%3C%2FP%3E%0A%3CP%20style%3D%22margin%3A%200in%3B%20margin-bottom%3A%20.0001pt%3B%22%3E%3CSPAN%20style%3D%22font-size%3A%2011.0pt%3B%20font-family%3A%20'Calibri'%2Csans-serif%3B%20mso-bidi-font-family%3A%20Calibri%3B%22%3E%26nbsp%3B%3C%2FSPAN%3E%3C%2FP%3E%0A%3CP%20style%3D%22margin%3A%200in%3B%20margin-bottom%3A%20.0001pt%3B%22%3E%3CSPAN%20style%3D%22font-size%3A%2011.0pt%3B%20font-family%3A%20'Calibri'%2Csans-serif%3B%20mso-bidi-font-family%3A%20Calibri%3B%22%3E%3CSPAN%20class%3D%22lia-inline-image-display-wrapper%20lia-image-align-inline%22%20style%3D%22width%3A%20673px%3B%22%3E%3CIMG%20src%3D%22https%3A%2F%2Fgxcuf89792.i.lithium.com%2Ft5%2Fimage%2Fserverpage%2Fimage-id%2F122296i748A13BC2B5A003F%2Fimage-dimensions%2F673x546%3Fv%3D1.0%22%20width%3D%22673%22%20height%3D%22546%22%20alt%3D%22image005.png%22%20title%3D%22image005.png%22%20%2F%3E%3C%2FSPAN%3E%3C%2FSPAN%3E%3C%2FP%3E%0A%3CP%20style%3D%22margin%3A%200in%3B%20margin-bottom%3A%20.0001pt%3B%22%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%20style%3D%22margin%3A%200in%3B%20margin-bottom%3A%20.0001pt%3B%22%3E%3CSPAN%20style%3D%22font-size%3A%2011.0pt%3B%20font-family%3A%20'Calibri'%2Csans-serif%3B%20mso-bidi-font-family%3A%20Calibri%3B%22%3EDelete%20the%20App%20from%20Azure%20Portal%20and%20try%20again%20using%20an%20account%20with%20Global%20Admin%20rights.%3C%2FSPAN%3E%3C%2FP%3E%0A%3CP%20style%3D%22margin%3A%200in%3B%20margin-bottom%3A%20.0001pt%3B%22%3E%3CSPAN%20style%3D%22font-size%3A%2011.0pt%3B%20font-family%3A%20'Calibri'%2Csans-serif%3B%20mso-bidi-font-family%3A%20Calibri%3B%22%3E%26nbsp%3B%3C%2FSPAN%3E%3C%2FP%3E%0A%3CP%20style%3D%22margin%3A%200in%3B%20margin-bottom%3A%20.0001pt%3B%22%3E%3CSPAN%20style%3D%22font-size%3A%2011.0pt%3B%20font-family%3A%20'Calibri'%2Csans-serif%3B%20mso-bidi-font-family%3A%20Calibri%3B%22%3E%3CSPAN%20class%3D%22lia-inline-image-display-wrapper%20lia-image-align-inline%22%20style%3D%22width%3A%20648px%3B%22%3E%3CIMG%20src%3D%22https%3A%2F%2Fgxcuf89792.i.lithium.com%2Ft5%2Fimage%2Fserverpage%2Fimage-id%2F122297i213BE91DFEDD9ABC%2Fimage-dimensions%2F648x530%3Fv%3D1.0%22%20width%3D%22648%22%20height%3D%22530%22%20alt%3D%22image007.png%22%20title%3D%22image007.png%22%20%2F%3E%3C%2FSPAN%3E%3C%2FSPAN%3E%3C%2FP%3E%0A%3CP%20style%3D%22margin%3A%200in%3B%20margin-bottom%3A%20.0001pt%3B%22%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%20style%3D%22margin%3A%200in%3B%20margin-bottom%3A%20.0001pt%3B%22%3E%3CI%3E%3CU%3E%3CSPAN%20style%3D%22font-size%3A%2011.0pt%3B%20font-family%3A%20'Calibri'%2Csans-serif%3B%20mso-bidi-font-family%3A%20Calibri%3B%22%3E%3CSPAN%20style%3D%22mso-spacerun%3A%20yes%3B%22%3E%26nbsp%3B%3C%2FSPAN%3EIf%20Signing-in%20as%20a%20Global%20Admin%20is%20not%20an%20option%20and%20you%20want%20to%20use%20the%20Import%20method%2C%20follow%20the%20below%20steps.%3C%2FSPAN%3E%3C%2FU%3E%3C%2FI%3E%3C%2FP%3E%0A%3CP%20style%3D%22margin%3A%200in%3B%20margin-bottom%3A%20.0001pt%3B%22%3E%3CSPAN%20style%3D%22font-size%3A%2011.0pt%3B%20font-family%3A%20'Calibri'%2Csans-serif%3B%20mso-bidi-font-family%3A%20Calibri%3B%22%3E%26nbsp%3B%3C%2FSPAN%3E%3C%2FP%3E%0A%3CP%20style%3D%22margin%3A%200in%3B%20margin-bottom%3A%20.0001pt%3B%22%3E%3CSTRONG%3E%3CSPAN%20style%3D%22font-size%3A%2014.0pt%3B%20font-family%3A%20'Calibri'%2Csans-serif%3B%20mso-bidi-font-family%3A%20Calibri%3B%22%3E1.%20Note%20tenant%20details%3C%2FSPAN%3E%3C%2FSTRONG%3E%3C%2FP%3E%0A%3CP%20style%3D%22margin%3A%200in%3B%20margin-bottom%3A%20.0001pt%3B%22%3E%3CSPAN%20style%3D%22font-size%3A%2011.0pt%3B%20font-family%3A%20'Calibri'%2Csans-serif%3B%20mso-bidi-font-family%3A%20Calibri%3B%22%3E%26nbsp%3B%3C%2FSPAN%3E%3C%2FP%3E%0A%3CP%20style%3D%22margin%3A%200in%3B%20margin-bottom%3A%20.0001pt%3B%22%3E%3CSTRONG%3E%3CSPAN%20style%3D%22font-size%3A%2011.0pt%3B%20font-family%3A%20'Calibri'%2Csans-serif%3B%20mso-bidi-font-family%3A%20Calibri%3B%22%3E1.1%3C%2FSPAN%3E%3C%2FSTRONG%3E%3CSPAN%20style%3D%22font-size%3A%2011.0pt%3B%20font-family%3A%20'Calibri'%2Csans-serif%3B%20mso-bidi-font-family%3A%20Calibri%3B%22%3E%20Before%20we%20begin%2C%20let's%20make%20a%20note%20of%20Azure%20AD%20Tenant%20Name%20and%20Tenant%20ID.%3C%2FSPAN%3E%3C%2FP%3E%0A%3CP%20style%3D%22margin%3A%200in%3B%20margin-bottom%3A%20.0001pt%3B%22%3E%3CSTRONG%3E%3CSPAN%20style%3D%22font-size%3A%2011.0pt%3B%20font-family%3A%20'Calibri'%2Csans-serif%3B%20mso-bidi-font-family%3A%20Calibri%3B%22%3EAAD%20Tenant%20Name%3A%3C%2FSPAN%3E%3C%2FSTRONG%3E%3CSPAN%20style%3D%22font-size%3A%2011.0pt%3B%20font-family%3A%20'Calibri'%2Csans-serif%3B%20mso-bidi-font-family%3A%20Calibri%3B%22%3E%20sccmcmg1902outlook.onmicrosoft.com%20(Trial%20account%20used%20for%20this%20demo)%3C%2FSPAN%3E%3C%2FP%3E%0A%3CP%20style%3D%22margin%3A%200in%3B%20margin-bottom%3A%20.0001pt%3B%22%3E%3CSPAN%20style%3D%22font-size%3A%2011.0pt%3B%20font-family%3A%20'Calibri'%2Csans-serif%3B%20mso-bidi-font-family%3A%20Calibri%3B%22%3E%26nbsp%3B%3C%2FSPAN%3E%3C%2FP%3E%0A%3CP%20style%3D%22margin%3A%200in%3B%20margin-bottom%3A%20.0001pt%3B%22%3E%3CSPAN%20style%3D%22font-size%3A%2011.0pt%3B%20font-family%3A%20'Calibri'%2Csans-serif%3B%20mso-bidi-font-family%3A%20Calibri%3B%22%3E%3CSPAN%20class%3D%22lia-inline-image-display-wrapper%20lia-image-align-inline%22%20style%3D%22width%3A%20688px%3B%22%3E%3CIMG%20src%3D%22https%3A%2F%2Fgxcuf89792.i.lithium.com%2Ft5%2Fimage%2Fserverpage%2Fimage-id%2F122298iC556AB97348395D8%2Fimage-dimensions%2F688x422%3Fv%3D1.0%22%20width%3D%22688%22%20height%3D%22422%22%20alt%3D%22image009.png%22%20title%3D%22image009.png%22%20%2F%3E%3C%2FSPAN%3E%3C%2FSPAN%3E%3C%2FP%3E%0A%3CP%20style%3D%22margin%3A%200in%3B%20margin-bottom%3A%20.0001pt%3B%22%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%20style%3D%22margin%3A%200in%3B%20margin-bottom%3A%20.0001pt%3B%22%3E%3CSTRONG%3E%3CSPAN%20style%3D%22font-size%3A%2011.0pt%3B%20font-family%3A%20'Calibri'%2Csans-serif%3B%20mso-bidi-font-family%3A%20Calibri%3B%22%3E1.2%3C%2FSPAN%3E%3C%2FSTRONG%3E%3CSPAN%20style%3D%22font-size%3A%2011.0pt%3B%20font-family%3A%20'Calibri'%2Csans-serif%3B%20mso-bidi-font-family%3A%20Calibri%3B%22%3E%20Get%20Tenant%20ID.%20Azure%20Active%20Directory%20-%26gt%3B%20Properties%20-%26gt%3B%20Directory%20ID%20(Tenant%20ID)%3C%2FSPAN%3E%3C%2FP%3E%0A%3CP%20style%3D%22margin%3A%200in%3B%20margin-bottom%3A%20.0001pt%3B%22%3E%3CSTRONG%3E%3CSPAN%20style%3D%22font-size%3A%2011.0pt%3B%20font-family%3A%20'Calibri'%2Csans-serif%3B%20mso-bidi-font-family%3A%20Calibri%3B%22%3EAzure%20AD%20Tenant%20ID%3A%20%3C%2FSPAN%3E%3C%2FSTRONG%3E%3CSPAN%20style%3D%22font-size%3A%2011.0pt%3B%20font-family%3A%20'az_ea_font'%2Cserif%3B%20mso-bidi-font-family%3A%20Calibri%3B%22%3E0fdb7ba4-ebc5-4373-8979-0f01bea6a90f%3C%2FSPAN%3E%3C%2FP%3E%0A%3CP%20style%3D%22margin%3A%200in%3B%20margin-bottom%3A%20.0001pt%3B%22%3E%3CSPAN%20style%3D%22font-size%3A%2011.0pt%3B%20font-family%3A%20'Calibri'%2Csans-serif%3B%20mso-bidi-font-family%3A%20Calibri%3B%22%3E%26nbsp%3B%3C%2FSPAN%3E%3C%2FP%3E%0A%3CP%20style%3D%22margin%3A%200in%3B%20margin-bottom%3A%20.0001pt%3B%22%3E%3CSPAN%20style%3D%22font-size%3A%2011.0pt%3B%20font-family%3A%20'Calibri'%2Csans-serif%3B%20mso-bidi-font-family%3A%20Calibri%3B%22%3E%26nbsp%3B%3CSPAN%20class%3D%22lia-inline-image-display-wrapper%20lia-image-align-inline%22%20style%3D%22width%3A%20700px%3B%22%3E%3CIMG%20src%3D%22https%3A%2F%2Fgxcuf89792.i.lithium.com%2Ft5%2Fimage%2Fserverpage%2Fimage-id%2F122299iC95D070AADF392DB%2Fimage-dimensions%2F700x352%3Fv%3D1.0%22%20width%3D%22700%22%20height%3D%22352%22%20alt%3D%22image011.png%22%20title%3D%22image011.png%22%20%2F%3E%3C%2FSPAN%3E%3C%2FSPAN%3E%3C%2FP%3E%0A%3CP%20style%3D%22margin%3A%200in%3B%20margin-bottom%3A%20.0001pt%3B%22%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%20style%3D%22margin%3A%200in%3B%20margin-bottom%3A%20.0001pt%3B%22%3E%3CSPAN%20style%3D%22font-size%3A%2011.0pt%3B%20font-family%3A%20'Calibri'%2Csans-serif%3B%20mso-bidi-font-family%3A%20Calibri%3B%22%3E%26nbsp%3B%3C%2FSPAN%3E%3C%2FP%3E%0A%3CP%20style%3D%22margin%3A%200in%3B%20margin-bottom%3A%20.0001pt%3B%22%3E%3CSTRONG%3E%3CSPAN%20style%3D%22font-family%3A%20'Calibri'%2Csans-serif%3B%20mso-bidi-font-family%3A%20Calibri%3B%22%3E2.%20Registering%20Server%2FWeb%20App%3C%2FSPAN%3E%3C%2FSTRONG%3E%3C%2FP%3E%0A%3CP%20style%3D%22margin%3A%200in%3B%20margin-bottom%3A%20.0001pt%3B%22%3E%3CSPAN%20style%3D%22font-size%3A%2011.0pt%3B%20font-family%3A%20'Calibri'%2Csans-serif%3B%20mso-bidi-font-family%3A%20Calibri%3B%22%3E%26nbsp%3B%3C%2FSPAN%3E%3C%2FP%3E%0A%3CP%20style%3D%22margin%3A%200in%3B%20margin-bottom%3A%20.0001pt%3B%22%3E%3CSTRONG%3E%3CSPAN%20style%3D%22font-size%3A%2011.0pt%3B%20font-family%3A%20'Calibri'%2Csans-serif%3B%20mso-bidi-font-family%3A%20Calibri%3B%22%3E2.1%20New%20Registration%3A%3C%2FSPAN%3E%3C%2FSTRONG%3E%3CSPAN%20style%3D%22font-size%3A%2011.0pt%3B%20font-family%3A%20'Calibri'%2Csans-serif%3B%20mso-bidi-font-family%3A%20Calibri%3B%22%3E%20Azure%20Active%20Directory%20-%26gt%3B%20App%20registrations%20-%26gt%3B%20Click%20on%20%3CSTRONG%3ENew%20registration%3C%2FSTRONG%3E%20to%20create%20a%20new%20App.%3C%2FSPAN%3E%3C%2FP%3E%0A%3CP%20style%3D%22margin%3A%200in%3B%20margin-bottom%3A%20.0001pt%3B%22%3E%3CSPAN%20style%3D%22font-size%3A%2011.0pt%3B%20font-family%3A%20'Calibri'%2Csans-serif%3B%20mso-bidi-font-family%3A%20Calibri%3B%22%3E%26nbsp%3B%3C%2FSPAN%3E%3C%2FP%3E%0A%3CP%20style%3D%22margin%3A%200in%3B%20margin-bottom%3A%20.0001pt%3B%22%3E%3CSPAN%20style%3D%22font-size%3A%2011.0pt%3B%20font-family%3A%20'Calibri'%2Csans-serif%3B%20mso-bidi-font-family%3A%20Calibri%3B%22%3E%3CSPAN%20class%3D%22lia-inline-image-display-wrapper%20lia-image-align-inline%22%20style%3D%22width%3A%20684px%3B%22%3E%3CIMG%20src%3D%22https%3A%2F%2Fgxcuf89792.i.lithium.com%2Ft5%2Fimage%2Fserverpage%2Fimage-id%2F122301i3DF9A849E2201C02%2Fimage-dimensions%2F684x363%3Fv%3D1.0%22%20width%3D%22684%22%20height%3D%22363%22%20alt%3D%22image013.png%22%20title%3D%22image013.png%22%20%2F%3E%3C%2FSPAN%3E%3C%2FSPAN%3E%3C%2FP%3E%0A%3CP%20style%3D%22margin%3A%200in%3B%20margin-bottom%3A%20.0001pt%3B%22%3E%3CSPAN%20style%3D%22font-size%3A%2011.0pt%3B%20font-family%3A%20'Calibri'%2Csans-serif%3B%20mso-bidi-font-family%3A%20Calibri%3B%22%3E%26nbsp%3B%3C%2FSPAN%3E%3C%2FP%3E%0A%3CP%20style%3D%22margin%3A%200in%3B%20margin-bottom%3A%20.0001pt%3B%22%3E%3CSPAN%20style%3D%22font-size%3A%2011.0pt%3B%20font-family%3A%20'Calibri'%2Csans-serif%3B%20mso-bidi-font-family%3A%20Calibri%3B%22%3E%26nbsp%3B%3C%2FSPAN%3E%3C%2FP%3E%0A%3CP%20style%3D%22margin%3A%200in%3B%20margin-bottom%3A%20.0001pt%3B%22%3E%3CSTRONG%3E%3CSPAN%20style%3D%22font-size%3A%2011.0pt%3B%20font-family%3A%20'Calibri'%2Csans-serif%3B%20mso-bidi-font-family%3A%20Calibri%3B%22%3E2.2%3C%2FSPAN%3E%3C%2FSTRONG%3E%3CSPAN%20style%3D%22font-size%3A%2011.0pt%3B%20font-family%3A%20'Calibri'%2Csans-serif%3B%20mso-bidi-font-family%3A%20Calibri%3B%22%3E%20Fill%20in%20the%20App%20Name.%3C%2FSPAN%3E%3C%2FP%3E%0A%3CP%20style%3D%22margin%3A%200in%3B%20margin-bottom%3A%20.0001pt%3B%22%3E%3CSPAN%20style%3D%22font-size%3A%2011.0pt%3B%20font-family%3A%20'Calibri'%2Csans-serif%3B%20mso-bidi-font-family%3A%20Calibri%3B%22%3E%26nbsp%3B%3C%2FSPAN%3E%3C%2FP%3E%0A%3CP%20style%3D%22margin%3A%200in%3B%20margin-bottom%3A%20.0001pt%3B%22%3E%3CSTRONG%3E%3CSPAN%20style%3D%22font-size%3A%2011.0pt%3B%20font-family%3A%20'Calibri'%2Csans-serif%3B%20mso-bidi-font-family%3A%20Calibri%3B%22%3EName%3C%2FSPAN%3E%3C%2FSTRONG%3E%3CSPAN%20style%3D%22font-size%3A%2011.0pt%3B%20font-family%3A%20'Calibri'%2Csans-serif%3B%20mso-bidi-font-family%3A%20Calibri%3B%22%3E%3A%20There%20is%20no%20guideline%20to%20use%20a%20specific%20name.%20Using%20CMG-%3CSPAN%20class%3D%22SpellE%22%3EServerApp%3C%2FSPAN%3E.%3C%2FSPAN%3E%3C%2FP%3E%0A%3CP%20style%3D%22margin%3A%200in%3B%20margin-bottom%3A%20.0001pt%3B%22%3E%3CSPAN%20style%3D%22font-size%3A%2011.0pt%3B%20font-family%3A%20'Calibri'%2Csans-serif%3B%20mso-bidi-font-family%3A%20Calibri%3B%22%3ESupported%20account%20types%3A%20Leave%20it%20to%20default%20%22Accounts%20in%20this%20organizational%20directory%20only%20(Default%20Directory)%22.%3C%2FSPAN%3E%3C%2FP%3E%0A%3CP%20style%3D%22margin%3A%200in%3B%20margin-bottom%3A%20.0001pt%3B%22%3E%3CSPAN%20style%3D%22font-size%3A%2011.0pt%3B%20font-family%3A%20'Calibri'%2Csans-serif%3B%20mso-bidi-font-family%3A%20Calibri%3B%22%3ERedirect%20URI%3A%20Leave%20it%20blank.%3C%2FSPAN%3E%3C%2FP%3E%0A%3CP%20style%3D%22margin%3A%200in%3B%20margin-bottom%3A%20.0001pt%3B%22%3E%3CSPAN%20style%3D%22font-size%3A%2011.0pt%3B%20font-family%3A%20'Calibri'%2Csans-serif%3B%20mso-bidi-font-family%3A%20Calibri%3B%22%3EClick%20on%20%3CSTRONG%3ERegister%3C%2FSTRONG%3E%20to%20create%20the%20App.%3C%2FSPAN%3E%3C%2FP%3E%0A%3CP%20style%3D%22margin%3A%200in%3B%20margin-bottom%3A%20.0001pt%3B%22%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%20style%3D%22margin%3A%200in%3B%20margin-bottom%3A%20.0001pt%3B%22%3E%3CSPAN%20style%3D%22font-size%3A%2011.0pt%3B%20font-family%3A%20'Calibri'%2Csans-serif%3B%20mso-bidi-font-family%3A%20Calibri%3B%22%3E%26nbsp%3B%3CSPAN%20class%3D%22lia-inline-image-display-wrapper%20lia-image-align-inline%22%20style%3D%22width%3A%20625px%3B%22%3E%3CIMG%20src%3D%22https%3A%2F%2Fgxcuf89792.i.lithium.com%2Ft5%2Fimage%2Fserverpage%2Fimage-id%2F122302iF90C1F1D2C734693%2Fimage-dimensions%2F625x746%3Fv%3D1.0%22%20width%3D%22625%22%20height%3D%22746%22%20alt%3D%22image015.png%22%20title%3D%22image015.png%22%20%2F%3E%3C%2FSPAN%3E%3C%2FSPAN%3E%3C%2FP%3E%0A%3CP%20style%3D%22margin%3A%200in%3B%20margin-bottom%3A%20.0001pt%3B%22%3E%3CSPAN%20style%3D%22font-size%3A%2011.0pt%3B%20font-family%3A%20'Calibri'%2Csans-serif%3B%20mso-bidi-font-family%3A%20Calibri%3B%22%3E%26nbsp%3B%3C%2FSPAN%3E%3C%2FP%3E%0A%3CP%20style%3D%22margin%3A%200in%3B%20margin-bottom%3A%20.0001pt%3B%22%3E%3CSTRONG%3E%3CSPAN%20style%3D%22font-size%3A%2011.0pt%3B%20font-family%3A%20'Calibri'%2Csans-serif%3B%20mso-bidi-font-family%3A%20Calibri%3B%22%3E2.3%3C%2FSPAN%3E%3C%2FSTRONG%3E%3CSPAN%20style%3D%22font-size%3A%2011.0pt%3B%20font-family%3A%20'Calibri'%2Csans-serif%3B%20mso-bidi-font-family%3A%20Calibri%3B%22%3E%20Make%20a%20note%20of%20newly%20registered%20App%20Name%20and%20App%20ID%20as%20we%20would%20need%20this%20information%20when%20we%20import%20it%20later%20in%20SCCM.%3C%2FSPAN%3E%3C%2FP%3E%0A%3CP%20style%3D%22margin%3A%200in%3B%20margin-bottom%3A%20.0001pt%3B%22%3E%3CSPAN%20style%3D%22font-size%3A%2011.0pt%3B%20font-family%3A%20'Calibri'%2Csans-serif%3B%20mso-bidi-font-family%3A%20Calibri%3B%22%3E%26nbsp%3B%3C%2FSPAN%3E%3C%2FP%3E%0A%3CP%20style%3D%22margin%3A%200in%3B%20margin-bottom%3A%20.0001pt%3B%22%3E%3CSTRONG%3E%3CSPAN%20style%3D%22font-size%3A%2011.0pt%3B%20font-family%3A%20'Calibri'%2Csans-serif%3B%20mso-bidi-font-family%3A%20Calibri%3B%22%3EApp%20Name%3C%2FSPAN%3E%3C%2FSTRONG%3E%3CSPAN%20style%3D%22font-size%3A%2011.0pt%3B%20font-family%3A%20'Calibri'%2Csans-serif%3B%20mso-bidi-font-family%3A%20Calibri%3B%22%3E%3A%20CMG-%3CSPAN%20class%3D%22SpellE%22%3EServerApp%3C%2FSPAN%3E%3C%2FSPAN%3E%3C%2FP%3E%0A%3CP%20style%3D%22margin%3A%200in%3B%20margin-bottom%3A%20.0001pt%3B%22%3E%3CSTRONG%3E%3CSPAN%20style%3D%22font-size%3A%2011.0pt%3B%20font-family%3A%20'Calibri'%2Csans-serif%3B%20mso-bidi-font-family%3A%20Calibri%3B%22%3EApplication%20(client)%20ID%3C%2FSPAN%3E%3C%2FSTRONG%3E%3CSPAN%20style%3D%22font-size%3A%2011.0pt%3B%20font-family%3A%20'Calibri'%2Csans-serif%3B%20mso-bidi-font-family%3A%20Calibri%3B%22%3E%3A%20%3C%2FSPAN%3E%3CSPAN%20style%3D%22font-size%3A%2011.0pt%3B%20font-family%3A%20'az_ea_font'%2Cserif%3B%20mso-bidi-font-family%3A%20Calibri%3B%22%3E5df94352-894e-4ee6-9219-df787ba6e578%3C%2FSPAN%3E%3C%2FP%3E%0A%3CP%20style%3D%22margin%3A%200in%3B%20margin-bottom%3A%20.0001pt%3B%22%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%20style%3D%22margin%3A%200in%3B%20margin-bottom%3A%20.0001pt%3B%22%3E%3CSPAN%20style%3D%22font-size%3A%2011.0pt%3B%20font-family%3A%20'Calibri'%2Csans-serif%3B%20mso-bidi-font-family%3A%20Calibri%3B%22%3E%3CSPAN%20class%3D%22lia-inline-image-display-wrapper%20lia-image-align-inline%22%20style%3D%22width%3A%20999px%3B%22%3E%3CIMG%20src%3D%22https%3A%2F%2Fgxcuf89792.i.lithium.com%2Ft5%2Fimage%2Fserverpage%2Fimage-id%2F122303i8AD4977611E47B83%2Fimage-size%2Flarge%3Fv%3D1.0%26amp%3Bpx%3D999%22%20alt%3D%22image017.png%22%20title%3D%22image017.png%22%20%2F%3E%3C%2FSPAN%3E%3C%2FSPAN%3E%3CSPAN%20style%3D%22font-size%3A%2011.0pt%3B%20font-family%3A%20'Calibri'%2Csans-serif%3B%20mso-bidi-font-family%3A%20Calibri%3B%22%3E%26nbsp%3B%3C%2FSPAN%3E%3C%2FP%3E%0A%3CP%20style%3D%22margin%3A%200in%3B%20margin-bottom%3A%20.0001pt%3B%22%3E%3CSTRONG%3E%3CSPAN%20style%3D%22font-size%3A%2011.0pt%3B%20font-family%3A%20'Calibri'%2Csans-serif%3B%20mso-bidi-font-family%3A%20Calibri%3B%22%3E2.4%20Authentication%3C%2FSPAN%3E%3C%2FSTRONG%3E%3CSPAN%20style%3D%22font-size%3A%2011.0pt%3B%20font-family%3A%20'Calibri'%2Csans-serif%3B%20mso-bidi-font-family%3A%20Calibri%3B%22%3E%3A%20Go%20to%20newly%20registered%20App%20properties.%20Under%20%3CSTRONG%3EAuthentication%3C%2FSTRONG%3E%2C%20we%20will%20leave%20all%20the%20settings%20to%20default%20except%20checking%20the%20%3CSTRONG%3EID%20tokens%3C%2FSTRONG%3E%20box%20at%20the%20bottom.%3C%2FSPAN%3E%3C%2FP%3E%0A%3CP%20style%3D%22margin%3A%200in%3B%20margin-bottom%3A%20.0001pt%3B%22%3E%3CSPAN%20style%3D%22font-size%3A%2011.0pt%3B%20font-family%3A%20'Calibri'%2Csans-serif%3B%20mso-bidi-font-family%3A%20Calibri%3B%22%3E%26nbsp%3B%3C%2FSPAN%3E%3C%2FP%3E%0A%3CP%20style%3D%22margin%3A%200in%3B%20margin-bottom%3A%20.0001pt%3B%22%3E%3CI%3E%3CSPAN%20style%3D%22font-size%3A%2011.0pt%3B%20font-family%3A%20'Calibri'%2Csans-serif%3B%20mso-bidi-font-family%3A%20Calibri%3B%22%3ETip%3A%20If%20you%20are%20new%20to%20Azure%20Portal%2C%20it%20is%20easy%20to%20get%20lost%20so%20always%20look%20at%20the%20path%20at%20the%20top%20as%20shown%20with%20an%20arrow%20to%20confirm%20where%20you%20are%20in%20the%20Portal.%3C%2FSPAN%3E%3C%2FI%3E%3C%2FP%3E%0A%3CP%20style%3D%22margin%3A%200in%3B%20margin-bottom%3A%20.0001pt%3B%22%3E%3CSPAN%20style%3D%22font-size%3A%2011.0pt%3B%20font-family%3A%20'Calibri'%2Csans-serif%3B%20mso-bidi-font-family%3A%20Calibri%3B%22%3E%26nbsp%3B%3C%2FSPAN%3E%3C%2FP%3E%0A%3CP%20style%3D%22margin%3A%200in%3B%20margin-bottom%3A%20.0001pt%3B%22%3E%3CSPAN%20style%3D%22font-size%3A%2011.0pt%3B%20font-family%3A%20'Calibri'%2Csans-serif%3B%20mso-bidi-font-family%3A%20Calibri%3B%22%3E%3CSPAN%20class%3D%22lia-inline-image-display-wrapper%20lia-image-align-inline%22%20style%3D%22width%3A%20999px%3B%22%3E%3CIMG%20src%3D%22https%3A%2F%2Fgxcuf89792.i.lithium.com%2Ft5%2Fimage%2Fserverpage%2Fimage-id%2F122304i8F0E86689404C6B3%2Fimage-size%2Flarge%3Fv%3D1.0%26amp%3Bpx%3D999%22%20alt%3D%22image019.png%22%20title%3D%22image019.png%22%20%2F%3E%3C%2FSPAN%3E%3C%2FSPAN%3E%3C%2FP%3E%0A%3CP%20style%3D%22margin%3A%200in%3B%20margin-bottom%3A%20.0001pt%3B%22%3E%3CSPAN%20style%3D%22font-size%3A%2011.0pt%3B%20font-family%3A%20'Calibri'%2Csans-serif%3B%20mso-bidi-font-family%3A%20Calibri%3B%22%3E%26nbsp%3B%3C%2FSPAN%3E%3C%2FP%3E%0A%3CP%20style%3D%22margin%3A%200in%3B%20margin-bottom%3A%20.0001pt%3B%22%3E%3CSTRONG%3E%3CSPAN%20style%3D%22font-size%3A%2011.0pt%3B%20font-family%3A%20'Calibri'%2Csans-serif%3B%20mso-bidi-font-family%3A%20Calibri%3B%22%3E2.5%20Certificates%20and%20secrets%3A%3C%2FSPAN%3E%3C%2FSTRONG%3E%3CSPAN%20style%3D%22font-size%3A%2011.0pt%3B%20font-family%3A%20'Calibri'%2Csans-serif%3B%20mso-bidi-font-family%3A%20Calibri%3B%22%3E%20Click%20on%20%3CSTRONG%3ENew%20client%20secret%3C%2FSTRONG%3E.%20Any%20description%20can%20be%20used%20for%20the%20secret.%20Expiry%20%3CSPAN%20class%3D%22GramE%22%3Ehas%20to%3C%2FSPAN%3E%20be%201%20or%202%20years.%20%22%3CSTRONG%3ENever%3C%2FSTRONG%3E%22%20is%20not%20supported%20with%20SCCM.%3C%2FSPAN%3E%3C%2FP%3E%0A%3CP%20style%3D%22margin%3A%200in%3B%20margin-bottom%3A%20.0001pt%3B%22%3E%3CSPAN%20style%3D%22font-size%3A%2011.0pt%3B%20font-family%3A%20'Calibri'%2Csans-serif%3B%20mso-bidi-font-family%3A%20Calibri%3B%22%3E%26nbsp%3B%3CSPAN%20class%3D%22lia-inline-image-display-wrapper%20lia-image-align-inline%22%20style%3D%22width%3A%20999px%3B%22%3E%3CIMG%20src%3D%22https%3A%2F%2Fgxcuf89792.i.lithium.com%2Ft5%2Fimage%2Fserverpage%2Fimage-id%2F122305iD4105180EAD202BF%2Fimage-size%2Flarge%3Fv%3D1.0%26amp%3Bpx%3D999%22%20alt%3D%22image021.png%22%20title%3D%22image021.png%22%20%2F%3E%3C%2FSPAN%3E%3C%2FSPAN%3E%3C%2FP%3E%0A%3CP%20style%3D%22margin%3A%200in%3B%20margin-bottom%3A%20.0001pt%3B%22%3E%3CSTRONG%3E%3CSPAN%20style%3D%22font-size%3A%2011.0pt%3B%20font-family%3A%20'Calibri'%2Csans-serif%3B%20mso-bidi-font-family%3A%20Calibri%3B%22%3E2.6%3C%2FSPAN%3E%3C%2FSTRONG%3E%3CSPAN%20style%3D%22font-size%3A%2011.0pt%3B%20font-family%3A%20'Calibri'%2Csans-serif%3B%20mso-bidi-font-family%3A%20Calibri%3B%22%3E%20Once%20you%20click%20%3CSTRONG%3EAdd%3C%2FSTRONG%3E%2C%20immediately%20make%20a%20note%20of%20Secret%20String%20Value%20and%20expiry%20date.%20If%20you%20move%20away%20from%20this%20screen%2C%20you%20won't%20be%20able%20to%20retrieve%20the%20same%20Secret%20again%20and%20you%20may%20have%20to%20generate%20a%20new%20Secret.%20We%20will%20be%20using%20this%20Secret%20String%20when%20importing%20the%20App.%3C%2FSPAN%3E%3C%2FP%3E%0A%3CP%20style%3D%22margin%3A%200in%3B%20margin-bottom%3A%20.0001pt%3B%22%3E%3CSTRONG%3E%3CSPAN%20style%3D%22font-size%3A%2011.0pt%3B%20font-family%3A%20'Calibri'%2Csans-serif%3B%20mso-bidi-font-family%3A%20Calibri%3B%22%3EExpires%3C%2FSPAN%3E%3C%2FSTRONG%3E%3CSPAN%20style%3D%22font-size%3A%2011.0pt%3B%20font-family%3A%20'Calibri'%2Csans-serif%3B%20mso-bidi-font-family%3A%20Calibri%3B%22%3E%20(Secret%20Key%20Expiry)%3A%206%2F29%2F2020%3C%2FSPAN%3E%3C%2FP%3E%0A%3CP%20style%3D%22margin%3A%200in%3B%20margin-bottom%3A%20.0001pt%3B%22%3E%3CSTRONG%3E%3CSPAN%20style%3D%22font-size%3A%2011.0pt%3B%20font-family%3A%20'Calibri'%2Csans-serif%3B%20mso-bidi-font-family%3A%20Calibri%3B%22%3EValue%3C%2FSPAN%3E%3C%2FSTRONG%3E%3CSPAN%20style%3D%22font-size%3A%2011.0pt%3B%20font-family%3A%20'Calibri'%2Csans-serif%3B%20mso-bidi-font-family%3A%20Calibri%3B%22%3E%20(Secret%20Key)%3A%3C%2FSPAN%3E%3C%2FP%3E%0A%3CP%20style%3D%22margin%3A%200in%3B%20margin-bottom%3A%20.0001pt%3B%22%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%20style%3D%22margin%3A%200in%3B%20margin-bottom%3A%20.0001pt%3B%22%3E%3CSPAN%20style%3D%22font-size%3A%2011.0pt%3B%20font-family%3A%20'Calibri'%2Csans-serif%3B%20mso-bidi-font-family%3A%20Calibri%3B%22%3E%3CSPAN%20class%3D%22lia-inline-image-display-wrapper%20lia-image-align-inline%22%20style%3D%22width%3A%20999px%3B%22%3E%3CIMG%20src%3D%22https%3A%2F%2Fgxcuf89792.i.lithium.com%2Ft5%2Fimage%2Fserverpage%2Fimage-id%2F122306iC5A3A6FEE77C841A%2Fimage-size%2Flarge%3Fv%3D1.0%26amp%3Bpx%3D999%22%20alt%3D%22image023.png%22%20title%3D%22image023.png%22%20%2F%3E%3C%2FSPAN%3E%3C%2FSPAN%3E%3CSPAN%20style%3D%22font-size%3A%2011.0pt%3B%20font-family%3A%20'Calibri'%2Csans-serif%3B%20mso-bidi-font-family%3A%20Calibri%3B%22%3E%26nbsp%3B%3C%2FSPAN%3E%3C%2FP%3E%0A%3CP%20style%3D%22margin%3A%200in%3B%20margin-bottom%3A%20.0001pt%3B%22%3E%3CSPAN%20style%3D%22font-size%3A%2011.0pt%3B%20font-family%3A%20'Calibri'%2Csans-serif%3B%20mso-bidi-font-family%3A%20Calibri%3B%22%3E%26nbsp%3B%3C%2FSPAN%3E%3C%2FP%3E%0A%3CP%20style%3D%22margin%3A%200in%3B%20margin-bottom%3A%20.0001pt%3B%22%3E%3CSTRONG%3E%3CSPAN%20style%3D%22font-size%3A%2011.0pt%3B%20font-family%3A%20'Calibri'%2Csans-serif%3B%20mso-bidi-font-family%3A%20Calibri%3B%22%3E2.7%20API%20Permissions%3C%2FSPAN%3E%3C%2FSTRONG%3E%3CSPAN%20style%3D%22font-size%3A%2011.0pt%3B%20font-family%3A%20'Calibri'%2Csans-serif%3B%20mso-bidi-font-family%3A%20Calibri%3B%22%3E%3A%20Modify%20Default%20Microsoft%20Graph%20API%20Permissions%20from%20%3CSPAN%20class%3D%22SpellE%22%3E%3CSTRONG%3EUser.Read%3C%2FSTRONG%3E%3C%2FSPAN%3E%20to%20%3CSPAN%20class%3D%22SpellE%22%3E%3CSPAN%20class%3D%22GramE%22%3E%3CSTRONG%3EDirectory.Read.All%3C%2FSTRONG%3E%3C%2FSPAN%3E%3C%2FSPAN%3E.%3C%2FSPAN%3E%3C%2FP%3E%0A%3CP%20style%3D%22margin%3A%200in%3B%20margin-bottom%3A%20.0001pt%3B%22%3E%3CSPAN%20style%3D%22font-size%3A%2011.0pt%3B%20font-family%3A%20'Calibri'%2Csans-serif%3B%20mso-bidi-font-family%3A%20Calibri%3B%22%3EClick%20on%20Microsoft%20Graph%20(1)%20to%20enumerate%20list%20of%20API%20permissions.%20Select%20%3CSTRONG%3EApplication%20permissions%3C%2FSTRONG%3E%20and%20under%20%3CSTRONG%3EDirectory%3C%2FSTRONG%3E%2C%20select%20%3CSPAN%20class%3D%22SpellE%22%3E%3CSPAN%20class%3D%22GramE%22%3E%3CSTRONG%3EDirectory.Read.All%3C%2FSTRONG%3E%3C%2FSPAN%3E%3C%2FSPAN%3E%20as%20shown%20and%20deselect%3CSTRONG%3E%20%3CSPAN%20class%3D%22SpellE%22%3EUser.Read%3C%2FSPAN%3E%3C%2FSTRONG%3E%20under%20%3CSTRONG%3EUser%3C%2FSTRONG%3E.%3C%2FSPAN%3E%3C%2FP%3E%0A%3CP%20style%3D%22margin%3A%200in%3B%20margin-bottom%3A%20.0001pt%3B%22%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%20style%3D%22margin%3A%200in%3B%20margin-bottom%3A%20.0001pt%3B%22%3E%3CSPAN%20style%3D%22font-size%3A%2011.0pt%3B%20font-family%3A%20'Calibri'%2Csans-serif%3B%20mso-bidi-font-family%3A%20Calibri%3B%22%3E%3CSPAN%20class%3D%22lia-inline-image-display-wrapper%20lia-image-align-inline%22%20style%3D%22width%3A%20999px%3B%22%3E%3CIMG%20src%3D%22https%3A%2F%2Fgxcuf89792.i.lithium.com%2Ft5%2Fimage%2Fserverpage%2Fimage-id%2F122307i4865E0FFCC6CCFDB%2Fimage-size%2Flarge%3Fv%3D1.0%26amp%3Bpx%3D999%22%20alt%3D%22image025.png%22%20title%3D%22image025.png%22%20%2F%3E%3C%2FSPAN%3E%26nbsp%3B%3C%2FSPAN%3E%3C%2FP%3E%0A%3CP%20style%3D%22margin%3A%200in%3B%20margin-bottom%3A%20.0001pt%3B%22%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%20style%3D%22margin%3A%200in%3B%20margin-bottom%3A%20.0001pt%3B%22%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%20style%3D%22margin%3A%200in%3B%20margin-bottom%3A%20.0001pt%3B%22%3E%3CSPAN%20class%3D%22GramE%22%3E%3CSTRONG%3E%3CSPAN%20style%3D%22font-size%3A%2011.0pt%3B%20font-family%3A%20'Calibri'%2Csans-serif%3B%20mso-bidi-font-family%3A%20Calibri%3B%22%3E2.8%3C%2FSPAN%3E%3C%2FSTRONG%3E%3CSPAN%20style%3D%22font-size%3A%2011.0pt%3B%20font-family%3A%20'Calibri'%2Csans-serif%3B%20mso-bidi-font-family%3A%20Calibri%3B%22%3E%3CSPAN%20style%3D%22mso-spacerun%3A%20yes%3B%22%3E%26nbsp%3B%20%3C%2FSPAN%3E%3C%2FSPAN%3E%3CSPAN%20class%3D%22contextualspellingandgrammarerror%22%3E%3CSPAN%20style%3D%22font-family%3A%20'Calibri'%2Csans-serif%3B%20mso-bidi-font-family%3A%20Calibri%3B%20color%3A%20black%3B%20background%3A%20white%3B%22%3ETo%3C%2FSPAN%3E%3C%2FSPAN%3E%3C%2FSPAN%3E%3CSPAN%20class%3D%22normaltextrun%22%3E%3CSPAN%20style%3D%22font-family%3A%20'Calibri'%2Csans-serif%3B%20mso-bidi-font-family%3A%20Calibri%3B%20color%3A%20black%3B%20background%3A%20white%3B%22%3E%26nbsp%3Bsuccessfully%20apply%20the%20permissions%2C%20click%20on%26nbsp%3B%3CSTRONG%3EGrant%20admin%20consent%20for%20Default%20Directory%3C%2FSTRONG%3E.%20Example%20below%20of%20the%20modified%20permissions.%3C%2FSPAN%3E%3C%2FSPAN%3E%3C%2FP%3E%0A%3CP%20style%3D%22margin%3A%200in%3B%20margin-bottom%3A%20.0001pt%3B%22%3E%3CSPAN%20style%3D%22font-size%3A%2011.0pt%3B%20font-family%3A%20'Calibri'%2Csans-serif%3B%20mso-bidi-font-family%3A%20Calibri%3B%22%3E%26nbsp%3B%3CSPAN%20class%3D%22lia-inline-image-display-wrapper%20lia-image-align-inline%22%20style%3D%22width%3A%20999px%3B%22%3E%3CIMG%20src%3D%22https%3A%2F%2Fgxcuf89792.i.lithium.com%2Ft5%2Fimage%2Fserverpage%2Fimage-id%2F122309iA91347A7C5E7B7B1%2Fimage-size%2Flarge%3Fv%3D1.0%26amp%3Bpx%3D999%22%20alt%3D%22image027.png%22%20title%3D%22image027.png%22%20%2F%3E%3C%2FSPAN%3E%3C%2FSPAN%3E%3C%2FP%3E%0A%3CP%20style%3D%22margin%3A%200in%3B%20margin-bottom%3A%20.0001pt%3B%22%3E%3CI%3E%3CSPAN%20style%3D%22font-size%3A%2011.0pt%3B%20font-family%3A%20'Calibri'%2Csans-serif%3B%20mso-bidi-font-family%3A%20Calibri%3B%22%3ENote%3A%20If%20these%20permissions%20are%20not%20granted%20correctly%2C%20AAD%20User%20Discovery%20will%20not%20work%20in%20SCCM.%3C%2FSPAN%3E%3C%2FI%3E%3C%2FP%3E%0A%3CP%20style%3D%22margin%3A%200in%3B%20margin-bottom%3A%20.0001pt%3B%22%3E%3CSPAN%20style%3D%22font-size%3A%2011.0pt%3B%20font-family%3A%20'Calibri'%2Csans-serif%3B%20mso-bidi-font-family%3A%20Calibri%3B%22%3E%26nbsp%3B%3C%2FSPAN%3E%3C%2FP%3E%0A%3CP%20style%3D%22margin%3A%200in%3B%20margin-bottom%3A%20.0001pt%3B%22%3E%3CSTRONG%3E%3CSPAN%20style%3D%22font-size%3A%2011.0pt%3B%20font-family%3A%20'Calibri'%2Csans-serif%3B%20mso-bidi-font-family%3A%20Calibri%3B%22%3E2.9%20Expose%20an%20API%3C%2FSPAN%3E%3C%2FSTRONG%3E%3CSPAN%20style%3D%22font-size%3A%2011.0pt%3B%20font-family%3A%20'Calibri'%2Csans-serif%3B%20mso-bidi-font-family%3A%20Calibri%3B%22%3E%3A%20We%20will%20be%20setting%20%3CSTRONG%3EApplication%20ID%20URI%3C%2FSTRONG%3E%20and%20going%20to%20%3CSTRONG%3EAdd%20a%20scope%3C%2FSTRONG%3E%20here.%20%3C%2FSPAN%3E%3C%2FP%3E%0A%3CP%20style%3D%22margin%3A%200in%3B%20margin-bottom%3A%20.0001pt%3B%22%3E%3CSPAN%20style%3D%22font-size%3A%2011.0pt%3B%20font-family%3A%20'Calibri'%2Csans-serif%3B%20mso-bidi-font-family%3A%20Calibri%3B%22%3E%26nbsp%3B%3C%2FSPAN%3E%3C%2FP%3E%0A%3CP%20style%3D%22margin%3A%200in%3B%20margin-bottom%3A%20.0001pt%3B%22%3E%3CSPAN%20style%3D%22font-size%3A%2011.0pt%3B%20font-family%3A%20'Calibri'%2Csans-serif%3B%20mso-bidi-font-family%3A%20Calibri%3B%22%3E%3CSPAN%20class%3D%22lia-inline-image-display-wrapper%20lia-image-align-inline%22%20style%3D%22width%3A%20999px%3B%22%3E%3CIMG%20src%3D%22https%3A%2F%2Fgxcuf89792.i.lithium.com%2Ft5%2Fimage%2Fserverpage%2Fimage-id%2F122310i1E8366417409120F%2Fimage-size%2Flarge%3Fv%3D1.0%26amp%3Bpx%3D999%22%20alt%3D%22image029.png%22%20title%3D%22image029.png%22%20%2F%3E%3C%2FSPAN%3E%3C%2FSPAN%3E%3C%2FP%3E%0A%3CP%20style%3D%22margin%3A%200in%3B%20margin-bottom%3A%20.0001pt%3B%22%3E%3CSPAN%20style%3D%22font-size%3A%2011.0pt%3B%20font-family%3A%20'Calibri'%2Csans-serif%3B%20mso-bidi-font-family%3A%20Calibri%3B%22%3E%26nbsp%3B%3C%2FSPAN%3E%3C%2FP%3E%0A%3CP%20style%3D%22margin%3A%200in%3B%20margin-bottom%3A%20.0001pt%3B%22%3E%3CFONT%20size%3D%222%22%3E%3CSPAN%20style%3D%22font-size%3A%2011.0pt%3B%20font-family%3A%20'Calibri'%2Csans-serif%3B%20mso-bidi-font-family%3A%20Calibri%3B%22%3EThere%20is%20no%20specific%20guideline%20related%20to%20what%20name%20must%20be%20used%20here.%20App%20ID%20URI%20just%20needs%20to%20be%20unique%20within%20the%20tenant%20and%20we%20will%20be%20using%20this%20when%20importing%20the%20App.%20Make%20a%20note%20of%20App%20ID%20URI.%3C%2FSPAN%3E%3C%2FFONT%3E%3C%2FP%3E%0A%3CP%20style%3D%22margin%3A%200in%3B%20margin-bottom%3A%20.0001pt%3B%22%3E%3CSPAN%20style%3D%22font-size%3A%2011.0pt%3B%20font-family%3A%20'Calibri'%2Csans-serif%3B%20mso-bidi-font-family%3A%20Calibri%3B%22%3E%26nbsp%3B%3C%2FSPAN%3E%3C%2FP%3E%0A%3CP%20style%3D%22margin%3A%200in%3B%20margin-bottom%3A%20.0001pt%3B%22%3E%3CSPAN%20style%3D%22font-size%3A%2011.0pt%3B%20font-family%3A%20'Calibri'%2Csans-serif%3B%20mso-bidi-font-family%3A%20Calibri%3B%22%3E%3CSPAN%20class%3D%22lia-inline-image-display-wrapper%20lia-image-align-inline%22%20style%3D%22width%3A%20599px%3B%22%3E%3CIMG%20src%3D%22https%3A%2F%2Fgxcuf89792.i.lithium.com%2Ft5%2Fimage%2Fserverpage%2Fimage-id%2F122311i7F0143BB2D3B0CBD%2Fimage-dimensions%2F599x259%3Fv%3D1.0%22%20width%3D%22599%22%20height%3D%22259%22%20alt%3D%22image031.png%22%20title%3D%22image031.png%22%20%2F%3E%3C%2FSPAN%3E%3C%2FSPAN%3E%3C%2FP%3E%0A%3CP%20style%3D%22margin%3A%200in%3B%20margin-bottom%3A%20.0001pt%3B%22%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%20style%3D%22margin%3A%200in%3B%20margin-bottom%3A%20.0001pt%3B%22%3E%3CSPAN%20style%3D%22font-size%3A%2011.0pt%3B%20font-family%3A%20'Calibri'%2Csans-serif%3B%20mso-bidi-font-family%3A%20Calibri%3B%22%3EScope%20name%3A%20%3CSPAN%20class%3D%22SpellE%22%3E%3CSTRONG%3Euser_impersonation%3C%2FSTRONG%3E%3C%2FSPAN%3E%3C%2FSPAN%3E%3C%2FP%3E%0A%3CP%20style%3D%22margin%3A%200in%3B%20margin-bottom%3A%20.0001pt%3B%22%3E%3CSPAN%20style%3D%22font-size%3A%2011.0pt%3B%20font-family%3A%20'Calibri'%2Csans-serif%3B%20mso-bidi-font-family%3A%20Calibri%3B%22%3EWho%20can%20%3CSPAN%20class%3D%22GramE%22%3Econsent%3F%3A%3C%2FSPAN%3E%20%3CSTRONG%3EAdmins%20and%20users%3C%2FSTRONG%3E%3C%2FSPAN%3E%3C%2FP%3E%0A%3CP%20style%3D%22margin%3A%200in%3B%20margin-bottom%3A%20.0001pt%3B%22%3E%3CSPAN%20style%3D%22font-size%3A%2011.0pt%3B%20font-family%3A%20'Calibri'%2Csans-serif%3B%20mso-bidi-font-family%3A%20Calibri%3B%22%3EHave%20some%20meaningful%20text%20under%20the%20remaining%20mandatory%20fields.%20Once%20done%2C%20click%20on%20%3CSTRONG%3EAdd%20scope%3C%2FSTRONG%3E%20to%20create%20the%20scope.%3C%2FSPAN%3E%3C%2FP%3E%0A%3CP%20style%3D%22margin%3A%200in%3B%20margin-bottom%3A%20.0001pt%3B%22%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%20style%3D%22margin%3A%200in%3B%20margin-bottom%3A%20.0001pt%3B%22%3E%3CSPAN%20style%3D%22font-size%3A%2011.0pt%3B%20font-family%3A%20'Calibri'%2Csans-serif%3B%20mso-bidi-font-family%3A%20Calibri%3B%22%3E%3CSPAN%20class%3D%22lia-inline-image-display-wrapper%20lia-image-align-inline%22%20style%3D%22width%3A%20673px%3B%22%3E%3CIMG%20src%3D%22https%3A%2F%2Fgxcuf89792.i.lithium.com%2Ft5%2Fimage%2Fserverpage%2Fimage-id%2F122312iE796CB7641FE123D%2Fimage-dimensions%2F673x433%3Fv%3D1.0%22%20width%3D%22673%22%20height%3D%22433%22%20alt%3D%22image033.png%22%20title%3D%22image033.png%22%20%2F%3E%3C%2FSPAN%3E%26nbsp%3B%3C%2FSPAN%3E%3C%2FP%3E%0A%3CP%20style%3D%22margin%3A%200in%3B%20margin-bottom%3A%20.0001pt%3B%22%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%20style%3D%22margin%3A%200in%3B%20margin-bottom%3A%20.0001pt%3B%22%3E%3CSPAN%20style%3D%22font-size%3A%2011.0pt%3B%20font-family%3A%20'Calibri'%2Csans-serif%3B%20mso-bidi-font-family%3A%20Calibri%3B%22%3EOnce%20created%2C%20this%20is%20how%20%3CSTRONG%3EExpose%20an%20API%3C%2FSTRONG%3E%20page%20would%20look%20like.%3C%2FSPAN%3E%3C%2FP%3E%0A%3CP%20style%3D%22margin%3A%200in%3B%20margin-bottom%3A%20.0001pt%3B%22%3E%3CSPAN%20style%3D%22font-size%3A%2011.0pt%3B%20font-family%3A%20'Calibri'%2Csans-serif%3B%20mso-bidi-font-family%3A%20Calibri%3B%22%3E%26nbsp%3B%3CSPAN%20class%3D%22lia-inline-image-display-wrapper%20lia-image-align-inline%22%20style%3D%22width%3A%20632px%3B%22%3E%3CIMG%20src%3D%22https%3A%2F%2Fgxcuf89792.i.lithium.com%2Ft5%2Fimage%2Fserverpage%2Fimage-id%2F122313iBC3D77CE3CFEBE6E%2Fimage-dimensions%2F632x315%3Fv%3D1.0%22%20width%3D%22632%22%20height%3D%22315%22%20alt%3D%22image035.png%22%20title%3D%22image035.png%22%20%2F%3E%3C%2FSPAN%3E%3C%2FSPAN%3E%3C%2FP%3E%0A%3CP%20style%3D%22margin%3A%200in%3B%20margin-bottom%3A%20.0001pt%3B%22%3E%3CSTRONG%3E%3CSPAN%20style%3D%22font-size%3A%2011.0pt%3B%20font-family%3A%20'Calibri'%2Csans-serif%3B%20mso-bidi-font-family%3A%20Calibri%3B%22%3EApp%20ID%20URI%3C%2FSPAN%3E%3C%2FSTRONG%3E%3CSPAN%20style%3D%22font-size%3A%2011.0pt%3B%20font-family%3A%20'Calibri'%2Csans-serif%3B%20mso-bidi-font-family%3A%20Calibri%3B%22%3E%20in%20this%20case%20is%20%3C%2FSPAN%3E%3CA%20href%3D%22https%3A%2F%2FCMGConfigMgrService%22%20target%3D%22_blank%22%20rel%3D%22noopener%20nofollow%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%22%3E%3CSPAN%20style%3D%22font-size%3A%2011.0pt%3B%20font-family%3A%20'Calibri'%2Csans-serif%3B%20mso-bidi-font-family%3A%20Calibri%3B%22%3Ehttps%3A%2F%2FCMGConfigMgrService%3C%2FSPAN%3E%3C%2FA%3E%3CSPAN%20style%3D%22font-size%3A%2011.0pt%3B%20font-family%3A%20'Calibri'%2Csans-serif%3B%20mso-bidi-font-family%3A%20Calibri%3B%22%3E.%20%3C%2FSPAN%3E%3C%2FP%3E%0A%3CP%20style%3D%22margin%3A%200in%3B%20margin-bottom%3A%20.0001pt%3B%22%3E%3CSPAN%20style%3D%22font-size%3A%2011.0pt%3B%20font-family%3A%20'Calibri'%2Csans-serif%3B%20mso-bidi-font-family%3A%20Calibri%3B%22%3E%26nbsp%3B%3C%2FSPAN%3E%3C%2FP%3E%0A%3CP%20style%3D%22margin%3A%200in%3B%20margin-bottom%3A%20.0001pt%3B%22%3E%3CSPAN%20style%3D%22font-size%3A%2011.0pt%3B%20font-family%3A%20'Calibri'%2Csans-serif%3B%20mso-bidi-font-family%3A%20Calibri%3B%22%3EThis%20completes%20Server%2FWeb%20App%20registrations%20steps.%20%3C%2FSPAN%3E%3C%2FP%3E%0A%3CP%20style%3D%22margin%3A%200in%3B%20margin-bottom%3A%20.0001pt%3B%22%3E%3CSPAN%20style%3D%22font-size%3A%2011.0pt%3B%20font-family%3A%20'Calibri'%2Csans-serif%3B%20mso-bidi-font-family%3A%20Calibri%3B%22%3E%26nbsp%3B%3C%2FSPAN%3E%3C%2FP%3E%0A%3CP%20style%3D%22margin%3A%200in%3B%20margin-bottom%3A%20.0001pt%3B%22%3E%3CSTRONG%3E%3CSPAN%20style%3D%22font-size%3A%2014.0pt%3B%20font-family%3A%20'Calibri'%2Csans-serif%3B%20mso-bidi-font-family%3A%20Calibri%3B%22%3E3.%20Registering%20Client%2FNative%20App%3C%2FSPAN%3E%3C%2FSTRONG%3E%3C%2FP%3E%0A%3CP%20style%3D%22margin%3A%200in%3B%20margin-bottom%3A%20.0001pt%3B%22%3E%3CSPAN%20style%3D%22font-size%3A%2011.0pt%3B%20font-family%3A%20'Calibri'%2Csans-serif%3B%20mso-bidi-font-family%3A%20Calibri%3B%22%3E%26nbsp%3B%3C%2FSPAN%3E%3C%2FP%3E%0A%3CP%20style%3D%22margin%3A%200in%3B%20margin-bottom%3A%20.0001pt%3B%22%3E%3CSTRONG%3E%3CSPAN%20style%3D%22font-size%3A%2011.0pt%3B%20font-family%3A%20'Calibri'%2Csans-serif%3B%20mso-bidi-font-family%3A%20Calibri%3B%22%3E3.1%3C%2FSPAN%3E%3C%2FSTRONG%3E%3CSPAN%20style%3D%22font-size%3A%2011.0pt%3B%20font-family%3A%20'Calibri'%2Csans-serif%3B%20mso-bidi-font-family%3A%20Calibri%3B%22%3E%20Just%20as%20we%20registered%20Server%20App%2C%20go%20to%20%3CI%3EApp%20registrations%3C%2FI%3E%20-%3CSPAN%20class%3D%22GramE%22%3E%26gt%3B%3CSPAN%20style%3D%22mso-spacerun%3A%20yes%3B%22%3E%26nbsp%3B%20%3C%2FSPAN%3E%3CSTRONG%3ENew%3C%2FSTRONG%3E%3C%2FSPAN%3E%3CSTRONG%3E%20registration%3C%2FSTRONG%3E%20to%20register%20a%20new%20Client%2FNative%20App.%3C%2FSPAN%3E%3C%2FP%3E%0A%3CP%20style%3D%22margin%3A%200in%3B%20margin-bottom%3A%20.0001pt%3B%22%3E%3CSPAN%20style%3D%22font-size%3A%2011.0pt%3B%20font-family%3A%20'Calibri'%2Csans-serif%3B%20mso-bidi-font-family%3A%20Calibri%3B%22%3E%26nbsp%3B%3C%2FSPAN%3E%3C%2FP%3E%0A%3CP%20style%3D%22margin%3A%200in%3B%20margin-bottom%3A%20.0001pt%3B%22%3E%3CSPAN%20style%3D%22font-size%3A%2011.0pt%3B%20font-family%3A%20'Calibri'%2Csans-serif%3B%20mso-bidi-font-family%3A%20Calibri%3B%22%3E%3CSPAN%20class%3D%22lia-inline-image-display-wrapper%20lia-image-align-inline%22%20style%3D%22width%3A%20628px%3B%22%3E%3CIMG%20src%3D%22https%3A%2F%2Fgxcuf89792.i.lithium.com%2Ft5%2Fimage%2Fserverpage%2Fimage-id%2F122314iE2E5DD7C0F3C84DF%2Fimage-dimensions%2F628x294%3Fv%3D1.0%22%20width%3D%22628%22%20height%3D%22294%22%20alt%3D%22image037.png%22%20title%3D%22image037.png%22%20%2F%3E%3C%2FSPAN%3E%3C%2FSPAN%3E%3C%2FP%3E%0A%3CP%20style%3D%22margin%3A%200in%3B%20margin-bottom%3A%20.0001pt%3B%22%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%20style%3D%22margin%3A%200in%3B%20margin-bottom%3A%20.0001pt%3B%22%3E%3CSPAN%20class%3D%22lia-inline-image-display-wrapper%20lia-image-align-inline%22%20style%3D%22width%3A%20618px%3B%22%3E%3CIMG%20src%3D%22https%3A%2F%2Fgxcuf89792.i.lithium.com%2Ft5%2Fimage%2Fserverpage%2Fimage-id%2F122315i3EFB349325143D45%2Fimage-dimensions%2F618x565%3Fv%3D1.0%22%20width%3D%22618%22%20height%3D%22565%22%20alt%3D%22image039.png%22%20title%3D%22image039.png%22%20%2F%3E%3C%2FSPAN%3E%3C%2FP%3E%0A%3CP%20style%3D%22margin%3A%200in%3B%20margin-bottom%3A%20.0001pt%3B%22%3E%3CSPAN%20style%3D%22font-size%3A%2011.0pt%3B%20font-family%3A%20'Calibri'%2Csans-serif%3B%20mso-bidi-font-family%3A%20Calibri%3B%22%3E%26nbsp%3B%3C%2FSPAN%3E%3C%2FP%3E%0A%3CP%20style%3D%22margin%3A%200in%3B%20margin-bottom%3A%20.0001pt%3B%22%3E%3CSPAN%20style%3D%22font-size%3A%2011.0pt%3B%20font-family%3A%20'Calibri'%2Csans-serif%3B%20mso-bidi-font-family%3A%20Calibri%3B%22%3E%26nbsp%3B%3C%2FSPAN%3E%3C%2FP%3E%0A%3CP%20style%3D%22margin%3A%200in%3B%20margin-bottom%3A%20.0001pt%3B%22%3E%3CSTRONG%3E%3CSPAN%20style%3D%22font-size%3A%2011.0pt%3B%20font-family%3A%20'Calibri'%2Csans-serif%3B%20mso-bidi-font-family%3A%20Calibri%3B%22%3E3.2%3C%2FSPAN%3E%3C%2FSTRONG%3E%3CSPAN%20style%3D%22font-size%3A%2011.0pt%3B%20font-family%3A%20'Calibri'%2Csans-serif%3B%20mso-bidi-font-family%3A%20Calibri%3B%22%3E%20Make%20a%20note%20of%20newly%20created%20Client%20App's%20Application%20ID%20from%20here%20as%20we%20need%20it%20in%20our%20next%20step.%3C%2FSPAN%3E%3C%2FP%3E%0A%3CP%20style%3D%22margin%3A%200in%3B%20margin-bottom%3A%20.0001pt%3B%22%3E%3CSPAN%20style%3D%22font-size%3A%2011.0pt%3B%20font-family%3A%20'Calibri'%2Csans-serif%3B%20mso-bidi-font-family%3A%20Calibri%3B%22%3E%26nbsp%3B%3C%2FSPAN%3E%3C%2FP%3E%0A%3CP%20style%3D%22margin%3A%200in%3B%20margin-bottom%3A%20.0001pt%3B%22%3E%3CSPAN%20style%3D%22font-size%3A%2011.0pt%3B%20font-family%3A%20'Calibri'%2Csans-serif%3B%20mso-bidi-font-family%3A%20Calibri%3B%22%3E%3CSPAN%20class%3D%22lia-inline-image-display-wrapper%20lia-image-align-inline%22%20style%3D%22width%3A%20615px%3B%22%3E%3CIMG%20src%3D%22https%3A%2F%2Fgxcuf89792.i.lithium.com%2Ft5%2Fimage%2Fserverpage%2Fimage-id%2F122316i1189F26A6DDEFCAF%2Fimage-dimensions%2F615x174%3Fv%3D1.0%22%20width%3D%22615%22%20height%3D%22174%22%20alt%3D%22image041.png%22%20title%3D%22image041.png%22%20%2F%3E%3C%2FSPAN%3E%3C%2FSPAN%3E%3C%2FP%3E%0A%3CP%20style%3D%22margin%3A%200in%3B%20margin-bottom%3A%20.0001pt%3B%22%3E%3CSPAN%20style%3D%22font-size%3A%2011.0pt%3B%20font-family%3A%20'Calibri'%2Csans-serif%3B%20mso-bidi-font-family%3A%20Calibri%3B%22%3E%26nbsp%3B%3C%2FSPAN%3E%3C%2FP%3E%0A%3CP%20style%3D%22margin%3A%200in%3B%20margin-bottom%3A%20.0001pt%3B%22%3E%3CSPAN%20style%3D%22font-size%3A%2011.0pt%3B%20font-family%3A%20'Calibri'%2Csans-serif%3B%20mso-bidi-font-family%3A%20Calibri%3B%22%3EApplication%20ID%20(%3CI%3EClient%20ID%3C%2FI%3E%3A(%3C%2Fimg%3E%20%3C%2FSPAN%3E%3CSPAN%20style%3D%22font-size%3A%2011.0pt%3B%20font-family%3A%20'az_ea_font'%2Cserif%3B%20mso-bidi-font-family%3A%20Calibri%3B%22%3E1a9e80cb-bda2-46e7-8dfb-d72c9e5c61e4%3C%2FSPAN%3E%3C%2FP%3E%0A%3CP%20style%3D%22margin%3A%200in%3B%20margin-bottom%3A%20.0001pt%3B%22%3E%3CSPAN%20style%3D%22font-size%3A%2011.0pt%3B%20font-family%3A%20'Calibri'%2Csans-serif%3B%20mso-bidi-font-family%3A%20Calibri%3B%22%3EDisplay%20name%20(%3CI%3EApplication%20Name%3C%2FI%3E%3A(%3C%2Fimg%3E%20CMG-%3CSPAN%20class%3D%22SpellE%22%3EClientApp%3C%2FSPAN%3E%3C%2FSPAN%3E%3C%2FP%3E%0A%3CP%20style%3D%22margin%3A%200in%3B%20margin-bottom%3A%20.0001pt%3B%22%3E%3CSPAN%20style%3D%22font-size%3A%2011.0pt%3B%20font-family%3A%20'Calibri'%2Csans-serif%3B%20mso-bidi-font-family%3A%20Calibri%3B%22%3E%26nbsp%3B%3C%2FSPAN%3E%3C%2FP%3E%0A%3CP%20style%3D%22margin%3A%200in%3B%20margin-bottom%3A%20.0001pt%3B%22%3E%3CSTRONG%3E%3CSPAN%20style%3D%22font-size%3A%2011.0pt%3B%20font-family%3A%20'Calibri'%2Csans-serif%3B%20mso-bidi-font-family%3A%20Calibri%3B%22%3E3.3%20Authentication%3C%2FSPAN%3E%3C%2FSTRONG%3E%3CSPAN%20style%3D%22font-size%3A%2011.0pt%3B%20font-family%3A%20'Calibri'%2Csans-serif%3B%20mso-bidi-font-family%3A%20Calibri%3B%22%3E%3A%20This%20is%20an%20important%20step.%20We%20are%20going%20to%20add%20a%3CSTRONG%3E%20REDIRECT%20URI%3C%2FSTRONG%3E%20here%20using%20the%20following%20syntax.%3C%2FSPAN%3E%3C%2FP%3E%0A%3CP%20style%3D%22margin%3A%200in%3B%20margin-bottom%3A%20.0001pt%3B%22%3E%3CSPAN%20class%3D%22SpellE%22%3E%3CSPAN%20style%3D%22font-size%3A%2011.0pt%3B%20font-family%3A%20'Calibri'%2Csans-serif%3B%20mso-bidi-font-family%3A%20Calibri%3B%22%3Ems%3C%2FSPAN%3E%3C%2FSPAN%3E%3CSPAN%20style%3D%22font-size%3A%2011.0pt%3B%20font-family%3A%20'Calibri'%2Csans-serif%3B%20mso-bidi-font-family%3A%20Calibri%3B%22%3E-appx-web%3A%2F%2F%3CSPAN%20class%3D%22SpellE%22%3EMicrosoft.AAD.BrokerPlugin%3C%2FSPAN%3E%2FClient%20App's%20Application%20ID%3C%2FSPAN%3E%3C%2FP%3E%0A%3CP%20style%3D%22margin%3A%200in%3B%20margin-bottom%3A%20.0001pt%3B%22%3E%3CSPAN%20style%3D%22font-size%3A%2011.0pt%3B%20font-family%3A%20'Calibri'%2Csans-serif%3B%20mso-bidi-font-family%3A%20Calibri%3B%20background%3A%20yellow%3B%20mso-highlight%3A%20yellow%3B%22%3Ems-appx-web%3A%2F%2FMicrosoft.AAD.BrokerPlugin%2F%3C%2FSPAN%3E%3CSPAN%20style%3D%22font-size%3A%2011.0pt%3B%20font-family%3A%20'az_ea_font'%2Cserif%3B%20mso-bidi-font-family%3A%20Calibri%3B%20background%3A%20yellow%3B%20mso-highlight%3A%20yellow%3B%22%3E1a9e80cb-bda2-46e7-8dfb-d72c9e5c61e4%3C%2FSPAN%3E%3CSPAN%20style%3D%22font-size%3A%2011.0pt%3B%20font-family%3A%20'az_ea_font'%2Cserif%3B%20mso-bidi-font-family%3A%20Calibri%3B%22%3E%20(This%20will%20be%20the%20REDIRECT%20URI.%20Copy%20the%20exact%20string%20with%20your%20Client%20Application%20ID)%3C%2FSPAN%3E%3C%2FP%3E%0A%3CP%20style%3D%22margin%3A%200in%3B%20margin-bottom%3A%20.0001pt%3B%22%3E%3CSPAN%20style%3D%22font-size%3A%2011.0pt%3B%20font-family%3A%20'Calibri'%2Csans-serif%3B%20mso-bidi-font-family%3A%20Calibri%3B%20color%3A%20black%3B%22%3EChange%20the%20%3CSTRONG%3EType%3C%2FSTRONG%3E%20to%20%3CI%3EPublic%20client%20(mobile%20%26amp%3B%20desktops)%3C%2FI%3E%20and%20check%20%3CSTRONG%3EID%20tokens%3C%2FSTRONG%3E%20option%20under%20%22Implicit%20grant%22.%20After%20making%20these%20changes%2C%20click%20%3CSTRONG%3ESave%3C%2FSTRONG%3E.%3C%2FSPAN%3E%3C%2FP%3E%0A%3CP%20style%3D%22margin%3A%200in%3B%20margin-bottom%3A%20.0001pt%3B%22%3E%3CSPAN%20style%3D%22font-size%3A%2011.0pt%3B%20font-family%3A%20'Calibri'%2Csans-serif%3B%20mso-bidi-font-family%3A%20Calibri%3B%20color%3A%20black%3B%22%3E%26nbsp%3B%3C%2FSPAN%3E%3C%2FP%3E%0A%3CP%20style%3D%22margin%3A%200in%3B%20margin-bottom%3A%20.0001pt%3B%22%3E%3CSPAN%20style%3D%22font-size%3A%2011.0pt%3B%20font-family%3A%20'Calibri'%2Csans-serif%3B%20mso-bidi-font-family%3A%20Calibri%3B%20color%3A%20black%3B%22%3E%3CSPAN%20class%3D%22lia-inline-image-display-wrapper%20lia-image-align-inline%22%20style%3D%22width%3A%20999px%3B%22%3E%3CIMG%20src%3D%22https%3A%2F%2Fgxcuf89792.i.lithium.com%2Ft5%2Fimage%2Fserverpage%2Fimage-id%2F122317iCBB313E2BE3CCA2B%2Fimage-size%2Flarge%3Fv%3D1.0%26amp%3Bpx%3D999%22%20alt%3D%22image043.png%22%20title%3D%22image043.png%22%20%2F%3E%3C%2FSPAN%3E%3C%2FSPAN%3E%3C%2FP%3E%0A%3CP%20style%3D%22margin%3A%200in%3B%20margin-bottom%3A%20.0001pt%3B%22%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%20style%3D%22margin%3A%200in%3B%20margin-bottom%3A%20.0001pt%3B%22%3E%3CSPAN%20style%3D%22font-size%3A%2011.0pt%3B%20font-family%3A%20'Calibri'%2Csans-serif%3B%20mso-bidi-font-family%3A%20Calibri%3B%20color%3A%20black%3B%22%3E%26nbsp%3B%3C%2FSPAN%3E%3C%2FP%3E%0A%3CP%20style%3D%22margin%3A%200in%3B%20margin-bottom%3A%20.0001pt%3B%22%3E%3CSTRONG%3E%3CSPAN%20style%3D%22font-size%3A%2011.0pt%3B%20font-family%3A%20'Calibri'%2Csans-serif%3B%20mso-bidi-font-family%3A%20Calibri%3B%22%3E3.4%20API%20permissions%3A%3C%2FSPAN%3E%3C%2FSTRONG%3E%3CSPAN%20style%3D%22font-size%3A%2011.0pt%3B%20font-family%3A%20'Calibri'%2Csans-serif%3B%20mso-bidi-font-family%3A%20Calibri%3B%22%3E%20Remove%20the%20default%20Microsoft%20Graph%20%3CSPAN%20class%3D%22SpellE%22%3E%3CSTRONG%3EUser.Read%3C%2FSTRONG%3E%3C%2FSPAN%3E%20permission%20shown%20in%20the%20screen%20below.%20To%20remove%2C%20uncheck%20%3CSPAN%20class%3D%22SpellE%22%3EUser.Read%3C%2FSPAN%3E.%3C%2FSPAN%3E%3C%2FP%3E%0A%3CP%20style%3D%22margin%3A%200in%3B%20margin-bottom%3A%20.0001pt%3B%22%3E%3CSPAN%20style%3D%22font-size%3A%2011.0pt%3B%20font-family%3A%20'Calibri'%2Csans-serif%3B%20mso-bidi-font-family%3A%20Calibri%3B%22%3E%26nbsp%3B%3C%2FSPAN%3E%3C%2FP%3E%0A%3CP%20style%3D%22margin%3A%200in%3B%20margin-bottom%3A%20.0001pt%3B%22%3E%3CSPAN%20style%3D%22font-size%3A%2011.0pt%3B%20font-family%3A%20'Calibri'%2Csans-serif%3B%20mso-bidi-font-family%3A%20Calibri%3B%22%3E%3CSPAN%20class%3D%22lia-inline-image-display-wrapper%20lia-image-align-inline%22%20style%3D%22width%3A%20671px%3B%22%3E%3CIMG%20src%3D%22https%3A%2F%2Fgxcuf89792.i.lithium.com%2Ft5%2Fimage%2Fserverpage%2Fimage-id%2F122318iD7C86C3E59DFF0F0%2Fimage-dimensions%2F671x439%3Fv%3D1.0%22%20width%3D%22671%22%20height%3D%22439%22%20alt%3D%22image045.png%22%20title%3D%22image045.png%22%20%2F%3E%3C%2FSPAN%3E%3C%2FSPAN%3E%3C%2FP%3E%0A%3CP%20style%3D%22margin%3A%200in%3B%20margin-bottom%3A%20.0001pt%3B%22%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%20style%3D%22margin%3A%200in%3B%20margin-bottom%3A%20.0001pt%3B%22%3E%3CSPAN%20style%3D%22font-size%3A%2011.0pt%3B%20font-family%3A%20'Calibri'%2Csans-serif%3B%20mso-bidi-font-family%3A%20Calibri%3B%22%3E%26nbsp%3B%3C%2FSPAN%3E%3C%2FP%3E%0A%3CP%20style%3D%22margin%3A%200in%3B%20margin-bottom%3A%20.0001pt%3B%22%3E%3CSTRONG%3E%3CSPAN%20style%3D%22font-size%3A%2011.0pt%3B%20font-family%3A%20'Calibri'%2Csans-serif%3B%20mso-bidi-font-family%3A%20Calibri%3B%22%3E3.5%3C%2FSPAN%3E%3C%2FSTRONG%3E%3CSPAN%20style%3D%22font-size%3A%2011.0pt%3B%20font-family%3A%20'Calibri'%2Csans-serif%3B%20mso-bidi-font-family%3A%20Calibri%3B%22%3E%20Click%20on%20%3CSTRONG%3EAdd%20a%20permission%3C%2FSTRONG%3E%20and%20select%20%3CSTRONG%3EAzure%20Active%20Directory%20Graph%3C%2FSTRONG%3E%20from%20the%20list%20of%20Microsoft%20APIs.%3C%2FSPAN%3E%3C%2FP%3E%0A%3CP%20style%3D%22margin%3A%200in%3B%20margin-bottom%3A%20.0001pt%3B%22%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%20style%3D%22margin%3A%200in%3B%20margin-bottom%3A%20.0001pt%3B%22%3E%3CSPAN%20style%3D%22font-size%3A%2011.0pt%3B%20font-family%3A%20'Calibri'%2Csans-serif%3B%20mso-bidi-font-family%3A%20Calibri%3B%22%3E%26nbsp%3B%3CSPAN%20class%3D%22lia-inline-image-display-wrapper%20lia-image-align-inline%22%20style%3D%22width%3A%20653px%3B%22%3E%3CIMG%20src%3D%22https%3A%2F%2Fgxcuf89792.i.lithium.com%2Ft5%2Fimage%2Fserverpage%2Fimage-id%2F122319i67C7257B77BF02D7%2Fimage-dimensions%2F653x442%3Fv%3D1.0%22%20width%3D%22653%22%20height%3D%22442%22%20alt%3D%22image047.png%22%20title%3D%22image047.png%22%20%2F%3E%3C%2FSPAN%3E%3C%2FSPAN%3E%3C%2FP%3E%0A%3CP%20style%3D%22margin%3A%200in%3B%20margin-bottom%3A%20.0001pt%3B%22%3E%3CSPAN%20style%3D%22font-size%3A%2011.0pt%3B%20font-family%3A%20'Calibri'%2Csans-serif%3B%20mso-bidi-font-family%3A%20Calibri%3B%22%3E%26nbsp%3B%3C%2FSPAN%3E%3C%2FP%3E%0A%3CP%20style%3D%22margin%3A%200in%3B%20margin-bottom%3A%20.0001pt%3B%22%3E%3CSPAN%20style%3D%22font-size%3A%2011.0pt%3B%20font-family%3A%20'Calibri'%2Csans-serif%3B%20mso-bidi-font-family%3A%20Calibri%3B%22%3EWhen%20prompted%20with%3A%20%3C%2FSPAN%3E%3C%2FP%3E%0A%3CP%20style%3D%22margin%3A%200in%3B%20margin-bottom%3A%20.0001pt%3B%22%3E%3CI%3E%3CSPAN%20style%3D%22font-size%3A%2011.0pt%3B%20font-family%3A%20'az_ea_font'%2Cserif%3B%20mso-bidi-font-family%3A%20Calibri%3B%22%3EWhat%20type%20of%20permissions%20does%20your%20application%20require%3F%3C%2FSPAN%3E%3C%2FI%3E%3C%2FP%3E%0A%3CP%20style%3D%22margin%3A%200in%3B%20margin-bottom%3A%20.0001pt%3B%22%3E%3CSPAN%20style%3D%22font-size%3A%2011.0pt%3B%20font-family%3A%20'Calibri'%2Csans-serif%3B%20mso-bidi-font-family%3A%20Calibri%3B%22%3ESelect%20%3CI%3EDelegated%20Permissions%3C%2FI%3E.%3C%2FSPAN%3E%3C%2FP%3E%0A%3CP%20style%3D%22margin%3A%200in%3B%20margin-bottom%3A%20.0001pt%3B%22%3E%3CSPAN%20style%3D%22font-size%3A%2011.0pt%3B%20font-family%3A%20'Calibri'%2Csans-serif%3B%20mso-bidi-font-family%3A%20Calibri%3B%22%3EUnder%20the%20list%20of%20permissions%2C%20select%20%3CSTRONG%3EDirectory%3C%2FSTRONG%3E%20and%20then%20%3CSPAN%20class%3D%22SpellE%22%3E%3CSPAN%20class%3D%22GramE%22%3E%3CSTRONG%3EDirectory.Read.All%3C%2FSTRONG%3E%3C%2FSPAN%3E%3C%2FSPAN%3E.%20When%20done%2C%20click%20on%20%3CSTRONG%3EAdd%20permissions%3C%2FSTRONG%3E.%3C%2FSPAN%3E%3C%2FP%3E%0A%3CP%20style%3D%22margin%3A%200in%3B%20margin-bottom%3A%20.0001pt%3B%22%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%20style%3D%22margin%3A%200in%3B%20margin-bottom%3A%20.0001pt%3B%22%3E%3CSPAN%20style%3D%22font-size%3A%2011.0pt%3B%20font-family%3A%20'Calibri'%2Csans-serif%3B%20mso-bidi-font-family%3A%20Calibri%3B%22%3E%26nbsp%3B%3CSPAN%20class%3D%22lia-inline-image-display-wrapper%20lia-image-align-inline%22%20style%3D%22width%3A%20644px%3B%22%3E%3CIMG%20src%3D%22https%3A%2F%2Fgxcuf89792.i.lithium.com%2Ft5%2Fimage%2Fserverpage%2Fimage-id%2F122320i25E3E77E60F08092%2Fimage-dimensions%2F644x416%3Fv%3D1.0%22%20width%3D%22644%22%20height%3D%22416%22%20alt%3D%22image049.png%22%20title%3D%22image049.png%22%20%2F%3E%3C%2FSPAN%3E%3C%2FSPAN%3E%3C%2FP%3E%0A%3CP%20style%3D%22margin%3A%200in%3B%20margin-bottom%3A%20.0001pt%3B%22%3E%3CSPAN%20style%3D%22font-size%3A%2011.0pt%3B%20font-family%3A%20'Calibri'%2Csans-serif%3B%20mso-bidi-font-family%3A%20Calibri%3B%22%3E%26nbsp%3B%3C%2FSPAN%3E%3C%2FP%3E%0A%3CP%20style%3D%22margin%3A%200in%3B%20margin-bottom%3A%20.0001pt%3B%22%3E%3CSPAN%20style%3D%22font-size%3A%2011.0pt%3B%20font-family%3A%20'Calibri'%2Csans-serif%3B%20mso-bidi-font-family%3A%20Calibri%3B%22%3E%26nbsp%3B%3C%2FSPAN%3E%3C%2FP%3E%0A%3CP%20style%3D%22margin%3A%200in%3B%20margin-bottom%3A%20.0001pt%3B%22%3E%3CSPAN%20style%3D%22font-size%3A%2011.0pt%3B%20font-family%3A%20'Calibri'%2Csans-serif%3B%20mso-bidi-font-family%3A%20Calibri%3B%22%3EWe%20need%20to%20add%20one%20more%20permission%20here.%20Adding%20access%20to%20Server%2FWeb%20App%20we%20created%20earlier.%20Click%20on%20%3CSTRONG%3EAdd%20a%20permission%3C%2FSTRONG%3E%20again%2C%20select%20%3CSTRONG%3EMy%20APIs%3C%2FSTRONG%3E%20and%20select%20%3CI%3ECMG-%3CSPAN%20class%3D%22SpellE%22%3EServerApp%3C%2FSPAN%3E%3C%2FI%3E%20we%20created%20earlier.%3C%2FSPAN%3E%3C%2FP%3E%0A%3CP%20style%3D%22margin%3A%200in%3B%20margin-bottom%3A%20.0001pt%3B%22%3E%3CSPAN%20style%3D%22font-size%3A%2011.0pt%3B%20font-family%3A%20'Calibri'%2Csans-serif%3B%20mso-bidi-font-family%3A%20Calibri%3B%22%3E%26nbsp%3B%3C%2FSPAN%3E%3C%2FP%3E%0A%3CP%20style%3D%22margin%3A%200in%3B%20margin-bottom%3A%20.0001pt%3B%22%3E%3CSPAN%20style%3D%22font-size%3A%2011.0pt%3B%20font-family%3A%20'Calibri'%2Csans-serif%3B%20mso-bidi-font-family%3A%20Calibri%3B%22%3E%3CSPAN%20class%3D%22lia-inline-image-display-wrapper%20lia-image-align-inline%22%20style%3D%22width%3A%20668px%3B%22%3E%3CIMG%20src%3D%22https%3A%2F%2Fgxcuf89792.i.lithium.com%2Ft5%2Fimage%2Fserverpage%2Fimage-id%2F122321i489E5451E0B3D19B%2Fimage-dimensions%2F668x324%3Fv%3D1.0%22%20width%3D%22668%22%20height%3D%22324%22%20alt%3D%22image051.png%22%20title%3D%22image051.png%22%20%2F%3E%3C%2FSPAN%3E%3C%2FSPAN%3E%3C%2FP%3E%0A%3CP%20style%3D%22margin%3A%200in%3B%20margin-bottom%3A%20.0001pt%3B%22%3E%3CSPAN%20style%3D%22font-size%3A%2011.0pt%3B%20font-family%3A%20'Calibri'%2Csans-serif%3B%20mso-bidi-font-family%3A%20Calibri%3B%22%3E%26nbsp%3B%3C%2FSPAN%3E%3C%2FP%3E%0A%3CP%20style%3D%22margin%3A%200in%3B%20margin-bottom%3A%20.0001pt%3B%22%3E%3CSPAN%20style%3D%22font-size%3A%2011.0pt%3B%20font-family%3A%20'Calibri'%2Csans-serif%3B%20mso-bidi-font-family%3A%20Calibri%3B%22%3EMake%20sure%20%3CSPAN%20class%3D%22SpellE%22%3E%3CSTRONG%3Euser_impersonation%3C%2FSTRONG%3E%3C%2FSPAN%3E%20is%20selected%20and%20click%20%3CI%3EAdd%20permissions%3C%2FI%3E%20to%20save%20the%20permissions.%3C%2FSPAN%3E%3C%2FP%3E%0A%3CP%20style%3D%22margin%3A%200in%3B%20margin-bottom%3A%20.0001pt%3B%22%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%20style%3D%22margin%3A%200in%3B%20margin-bottom%3A%20.0001pt%3B%22%3E%3CSPAN%20style%3D%22font-size%3A%2011.0pt%3B%20font-family%3A%20'Calibri'%2Csans-serif%3B%20mso-bidi-font-family%3A%20Calibri%3B%22%3E%26nbsp%3B%3CSPAN%20class%3D%22lia-inline-image-display-wrapper%20lia-image-align-inline%22%20style%3D%22width%3A%20661px%3B%22%3E%3CIMG%20src%3D%22https%3A%2F%2Fgxcuf89792.i.lithium.com%2Ft5%2Fimage%2Fserverpage%2Fimage-id%2F122322i01003358AC993F63%2Fimage-dimensions%2F661x438%3Fv%3D1.0%22%20width%3D%22661%22%20height%3D%22438%22%20alt%3D%22image053.png%22%20title%3D%22image053.png%22%20%2F%3E%3C%2FSPAN%3E%3C%2FSPAN%3E%3C%2FP%3E%0A%3CP%20style%3D%22margin%3A%200in%3B%20margin-bottom%3A%20.0001pt%3B%22%3E%3CSPAN%20style%3D%22font-size%3A%2011.0pt%3B%20font-family%3A%20'Calibri'%2Csans-serif%3B%20mso-bidi-font-family%3A%20Calibri%3B%22%3E%26nbsp%3B%3C%2FSPAN%3E%3C%2FP%3E%0A%3CP%20style%3D%22margin%3A%200in%3B%20margin-bottom%3A%20.0001pt%3B%22%3E%3CSPAN%20style%3D%22font-size%3A%2011.0pt%3B%20font-family%3A%20'Calibri'%2Csans-serif%3B%20mso-bidi-font-family%3A%20Calibri%3B%22%3ETo%20complete%20the%20permission%20assignment%2C%20grant%20consent%20by%20clicking%20on%20%3CSTRONG%3EGrant%20admin%20context%20for%20Default%20Directory.%3C%2FSTRONG%3E%3C%2FSPAN%3E%3C%2FP%3E%0A%3CP%20style%3D%22margin%3A%200in%3B%20margin-bottom%3A%20.0001pt%3B%22%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%20style%3D%22margin%3A%200in%3B%20margin-bottom%3A%20.0001pt%3B%22%3E%3CSPAN%20style%3D%22font-size%3A%2011.0pt%3B%20font-family%3A%20'Calibri'%2Csans-serif%3B%20mso-bidi-font-family%3A%20Calibri%3B%22%3E%3CSPAN%20class%3D%22lia-inline-image-display-wrapper%20lia-image-align-inline%22%20style%3D%22width%3A%20666px%3B%22%3E%3CIMG%20src%3D%22https%3A%2F%2Fgxcuf89792.i.lithium.com%2Ft5%2Fimage%2Fserverpage%2Fimage-id%2F122323i2D5FB3391E10833E%2Fimage-dimensions%2F666x346%3Fv%3D1.0%22%20width%3D%22666%22%20height%3D%22346%22%20alt%3D%22image055.png%22%20title%3D%22image055.png%22%20%2F%3E%3C%2FSPAN%3E%26nbsp%3B%3C%2FSPAN%3E%3C%2FP%3E%0A%3CP%20style%3D%22margin%3A%200in%3B%20margin-bottom%3A%20.0001pt%3B%22%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%20style%3D%22margin%3A%200in%3B%20margin-bottom%3A%20.0001pt%3B%22%3E%3CI%3E%3CSPAN%20style%3D%22font-size%3A%2011.0pt%3B%20font-family%3A%20'Calibri'%2Csans-serif%3B%20mso-bidi-font-family%3A%20Calibri%3B%22%3ENote%3A%20This%20completes%20all%20the%20needed%20changes%20in%20Azure%20Portal.%20Role%20of%20%3CSTRONG%3EGlobal%20Admin%3C%2FSTRONG%3E%20ends%20here.%3C%2FSPAN%3E%3C%2FI%3E%3C%2FP%3E%0A%3CP%20style%3D%22margin%3A%200in%3B%20margin-bottom%3A%20.0001pt%3B%22%3E%3CSPAN%20style%3D%22font-size%3A%2011.0pt%3B%20font-family%3A%20'Calibri'%2Csans-serif%3B%20mso-bidi-font-family%3A%20Calibri%3B%22%3E%26nbsp%3B%3C%2FSPAN%3E%3C%2FP%3E%0A%3CP%20style%3D%22margin%3A%200in%3B%20margin-bottom%3A%20.0001pt%3B%22%3E%3CSTRONG%3E%3CSPAN%20style%3D%22font-size%3A%2014.0pt%3B%20font-family%3A%20'Calibri'%2Csans-serif%3B%20mso-bidi-font-family%3A%20Calibri%3B%22%3E4.%20Importing%20Server%2FWeb%20and%20Client%2FNative%20Apps%3C%2FSPAN%3E%3C%2FSTRONG%3E%3C%2FP%3E%0A%3CP%20style%3D%22margin%3A%200in%3B%20margin-bottom%3A%20.0001pt%3B%22%3E%3CSPAN%20style%3D%22font-size%3A%2011.0pt%3B%20font-family%3A%20'Calibri'%2Csans-serif%3B%20mso-bidi-font-family%3A%20Calibri%3B%22%3E%26nbsp%3B%3C%2FSPAN%3E%3C%2FP%3E%0A%3CP%20style%3D%22margin%3A%200in%3B%20margin-bottom%3A%20.0001pt%3B%22%3E%3CSTRONG%3E%3CSPAN%20style%3D%22font-size%3A%2011.0pt%3B%20font-family%3A%20'Calibri'%2Csans-serif%3B%20mso-bidi-font-family%3A%20Calibri%3B%22%3E4.1%20Importing%20Server%2FWeb%20App%3C%2FSPAN%3E%3C%2FSTRONG%3E%3C%2FP%3E%0A%3CP%20style%3D%22margin%3A%200in%3B%20margin-bottom%3A%20.0001pt%3B%22%3E%3CSPAN%20style%3D%22font-size%3A%2011.0pt%3B%20font-family%3A%20'Calibri'%2Csans-serif%3B%20mso-bidi-font-family%3A%20Calibri%3B%22%3E%26nbsp%3B%3C%2FSPAN%3E%3C%2FP%3E%0A%3CP%20class%3D%22MsoNormal%22%3E%3CSPAN%20class%3D%22normaltextrun%22%3E%3CSPAN%20style%3D%22mso-ascii-font-family%3A%20Calibri%3B%20mso-hansi-font-family%3A%20Calibri%3B%20mso-bidi-font-family%3A%20Calibri%3B%20color%3A%20black%3B%20background%3A%20white%3B%22%3EPerform%20these%20steps%20at%20the%20top%20of%20the%20hierarchy%2C%20CAS%20or%20Primary%20(if%20there%20is%20no%20CAS)%20server%20using%20an%20SCCM%20Admin%20account.%3C%2FSPAN%3E%3C%2FSPAN%3E%3C%2FP%3E%0A%3CP%20style%3D%22margin%3A%200in%3B%20margin-bottom%3A%20.0001pt%3B%22%3E%3CSPAN%20style%3D%22font-size%3A%2011.0pt%3B%20font-family%3A%20'Calibri'%2Csans-serif%3B%20mso-bidi-font-family%3A%20Calibri%3B%22%3EOpen%20SCCM%20Console%20-%20%26gt%3B%20Administration%20-%26gt%3B%20Azure%20Services%20-%26gt%3B%20Configure%20Azure%20Services.%3C%2FSPAN%3E%3C%2FP%3E%0A%3CP%20style%3D%22margin%3A%200in%3B%20margin-bottom%3A%20.0001pt%3B%22%3E%3CSPAN%20style%3D%22font-size%3A%2011.0pt%3B%20font-family%3A%20'Calibri'%2Csans-serif%3B%20mso-bidi-font-family%3A%20Calibri%3B%22%3EName%3A%20No%20specific%20requirement.%20Use%20any%20meaningful%20name.%3C%2FSPAN%3E%3C%2FP%3E%0A%3CP%20style%3D%22margin%3A%200in%3B%20margin-bottom%3A%20.0001pt%3B%22%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%20style%3D%22margin%3A%200in%3B%20margin-bottom%3A%20.0001pt%3B%22%3E%3CSPAN%20style%3D%22font-size%3A%2011.0pt%3B%20font-family%3A%20'Calibri'%2Csans-serif%3B%20mso-bidi-font-family%3A%20Calibri%3B%22%3E%26nbsp%3B%3CSPAN%20class%3D%22lia-inline-image-display-wrapper%20lia-image-align-inline%22%20style%3D%22width%3A%20667px%3B%22%3E%3CIMG%20src%3D%22https%3A%2F%2Fgxcuf89792.i.lithium.com%2Ft5%2Fimage%2Fserverpage%2Fimage-id%2F122324i46685FF5C3440FE4%2Fimage-dimensions%2F667x528%3Fv%3D1.0%22%20width%3D%22667%22%20height%3D%22528%22%20alt%3D%22image057.png%22%20title%3D%22image057.png%22%20%2F%3E%3C%2FSPAN%3E%3C%2FSPAN%3E%3C%2FP%3E%0A%3CP%20style%3D%22margin%3A%200in%3B%20margin-bottom%3A%20.0001pt%3B%22%3E%3CSPAN%20style%3D%22font-size%3A%2011.0pt%3B%20font-family%3A%20'Calibri'%2Csans-serif%3B%20mso-bidi-font-family%3A%20Calibri%3B%22%3E%26nbsp%3B%3C%2FSPAN%3E%3C%2FP%3E%0A%3CP%20style%3D%22margin%3A%200in%3B%20margin-bottom%3A%20.0001pt%3B%22%3E%3CSTRONG%3E%3CSPAN%20style%3D%22font-size%3A%2011.0pt%3B%20font-family%3A%20'Calibri'%2Csans-serif%3B%20mso-bidi-font-family%3A%20Calibri%3B%22%3E4.2%3C%2FSPAN%3E%3C%2FSTRONG%3E%3CSPAN%20style%3D%22font-size%3A%2011.0pt%3B%20font-family%3A%20'Calibri'%2Csans-serif%3B%20mso-bidi-font-family%3A%20Calibri%3B%22%3E%20Click%20on%20Browse%20button%20next%20to%20%3CSTRONG%3EWeb%20app%3C%2FSTRONG%3E.%20Create%20option%20will%20be%20selected%20if%20you%20have%20Global%20Admin%20permissions%20to%20create%20the%20Apps%20automatically%20in%20Azure.%20We%20will%20be%20selecting%20import%20option%20as%20we%20are%20going%20to%20import%20the%20Apps%20created%20above.%3C%2FSPAN%3E%3C%2FP%3E%0A%3CP%20style%3D%22margin%3A%200in%3B%20margin-bottom%3A%20.0001pt%3B%22%3E%3CSPAN%20style%3D%22font-size%3A%2011.0pt%3B%20font-family%3A%20'Calibri'%2Csans-serif%3B%20mso-bidi-font-family%3A%20Calibri%3B%22%3E%26nbsp%3B%3C%2FSPAN%3E%3C%2FP%3E%0A%3CP%20style%3D%22margin%3A%200in%3B%20margin-bottom%3A%20.0001pt%3B%22%3E%3CSPAN%20style%3D%22font-size%3A%2011.0pt%3B%20font-family%3A%20'Calibri'%2Csans-serif%3B%20mso-bidi-font-family%3A%20Calibri%3B%22%3E%3CSPAN%20class%3D%22lia-inline-image-display-wrapper%20lia-image-align-inline%22%20style%3D%22width%3A%20623px%3B%22%3E%3CIMG%20src%3D%22https%3A%2F%2Fgxcuf89792.i.lithium.com%2Ft5%2Fimage%2Fserverpage%2Fimage-id%2F122326iCD96B4D939C26227%2Fimage-dimensions%2F623x691%3Fv%3D1.0%22%20width%3D%22623%22%20height%3D%22691%22%20alt%3D%22image059.png%22%20title%3D%22image059.png%22%20%2F%3E%3C%2FSPAN%3E%3C%2FSPAN%3E%3C%2FP%3E%0A%3CP%20style%3D%22margin%3A%200in%3B%20margin-bottom%3A%20.0001pt%3B%22%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%20style%3D%22margin%3A%200in%3B%20margin-bottom%3A%20.0001pt%3B%22%3E%3CSPAN%20style%3D%22font-size%3A%2011.0pt%3B%20font-family%3A%20'Calibri'%2Csans-serif%3B%20mso-bidi-font-family%3A%20Calibri%3B%22%3E%26nbsp%3B%3C%2FSPAN%3E%3C%2FP%3E%0A%3CP%20class%3D%22MsoNormal%22%3E%3CSPAN%20class%3D%22normaltextrun%22%3E%3CSPAN%20style%3D%22mso-ascii-font-family%3A%20Calibri%3B%20mso-hansi-font-family%3A%20Calibri%3B%20mso-bidi-font-family%3A%20Calibri%3B%20color%3A%20black%3B%20background%3A%20white%3B%22%3ETo%20import%20Server%2FWeb%20App%2C%20use%20the%20values%20obtained%20from%20previous%20steps%20and%20%3CSPAN%20class%3D%22GramE%22%3Eenter%20into%3C%2FSPAN%3E%20the%20corresponding%20boxes%20shown%20below.%3C%2FSPAN%3E%3C%2FSPAN%3E%3CSPAN%20class%3D%22eop%22%3E%3CSPAN%20style%3D%22mso-ascii-font-family%3A%20Calibri%3B%20mso-hansi-font-family%3A%20Calibri%3B%20mso-bidi-font-family%3A%20Calibri%3B%20color%3A%20black%3B%20background%3A%20white%3B%22%3E%26nbsp%3B%3C%2FSPAN%3E%3C%2FSPAN%3E%3C%2FP%3E%0A%3CP%20style%3D%22margin%3A%200in%3B%20margin-bottom%3A%20.0001pt%3B%22%3E%3CSPAN%20style%3D%22font-size%3A%2011.0pt%3B%20font-family%3A%20'Calibri'%2Csans-serif%3B%20mso-bidi-font-family%3A%20Calibri%3B%22%3E%26nbsp%3B%3CSPAN%20class%3D%22lia-inline-image-display-wrapper%20lia-image-align-inline%22%20style%3D%22width%3A%20531px%3B%22%3E%3CIMG%20src%3D%22https%3A%2F%2Fgxcuf89792.i.lithium.com%2Ft5%2Fimage%2Fserverpage%2Fimage-id%2F122327i33968B033B856345%2Fimage-dimensions%2F531x484%3Fv%3D1.0%22%20width%3D%22531%22%20height%3D%22484%22%20alt%3D%22image061.png%22%20title%3D%22image061.png%22%20%2F%3E%3C%2FSPAN%3E%3C%2FSPAN%3E%3C%2FP%3E%0A%3CP%20style%3D%22margin%3A%200in%3B%20margin-bottom%3A%20.0001pt%3B%22%3E%3CSPAN%20style%3D%22font-size%3A%2011.0pt%3B%20font-family%3A%20'Calibri'%2Csans-serif%3B%20mso-bidi-font-family%3A%20Calibri%3B%22%3E%26nbsp%3B%3C%2FSPAN%3E%3C%2FP%3E%0A%3CP%20style%3D%22margin%3A%200in%3B%20margin-bottom%3A%20.0001pt%3B%22%3E%3CSPAN%20style%3D%22font-size%3A%2011.0pt%3B%20font-family%3A%20'Calibri'%2Csans-serif%3B%20mso-bidi-font-family%3A%20Calibri%3B%22%3EIf%20the%20values%20are%20accurate%2C%20you%20will%20get%20%3CSTRONG%3ESuccessfully%20verified%3C%2FSTRONG%3E%20message%20when%20you%20click%20on%20%3CSTRONG%3EVerify%3C%2FSTRONG%3E%20as%20you%20see%20below.%20%3C%2FSPAN%3E%3C%2FP%3E%0A%3CP%20style%3D%22margin%3A%200in%3B%20margin-bottom%3A%20.0001pt%3B%22%3E%3CSPAN%20style%3D%22font-size%3A%2011.0pt%3B%20font-family%3A%20'Calibri'%2Csans-serif%3B%20mso-bidi-font-family%3A%20Calibri%3B%22%3E%26nbsp%3B%3C%2FSPAN%3E%3C%2FP%3E%0A%3CP%20style%3D%22margin%3A%200in%3B%20margin-bottom%3A%20.0001pt%3B%22%3E%3CSPAN%20style%3D%22font-size%3A%2011.0pt%3B%20font-family%3A%20'Calibri'%2Csans-serif%3B%20mso-bidi-font-family%3A%20Calibri%3B%22%3EClick%20OK%20to%20proceed.%3C%2FSPAN%3E%3C%2FP%3E%0A%3CP%20style%3D%22margin%3A%200in%3B%20margin-bottom%3A%20.0001pt%3B%22%3E%3CSPAN%20style%3D%22font-size%3A%2011.0pt%3B%20font-family%3A%20'Calibri'%2Csans-serif%3B%20mso-bidi-font-family%3A%20Calibri%3B%22%3E%26nbsp%3B%3CSPAN%20class%3D%22lia-inline-image-display-wrapper%20lia-image-align-inline%22%20style%3D%22width%3A%20517px%3B%22%3E%3CIMG%20src%3D%22https%3A%2F%2Fgxcuf89792.i.lithium.com%2Ft5%2Fimage%2Fserverpage%2Fimage-id%2F122329iDB6437EDC3D54DC4%2Fimage-dimensions%2F517x345%3Fv%3D1.0%22%20width%3D%22517%22%20height%3D%22345%22%20alt%3D%22image063.png%22%20title%3D%22image063.png%22%20%2F%3E%3C%2FSPAN%3E%3C%2FSPAN%3E%3C%2FP%3E%0A%3CP%20style%3D%22margin%3A%200in%3B%20margin-bottom%3A%20.0001pt%3B%22%3E%3CSPAN%20style%3D%22font-size%3A%2011.0pt%3B%20font-family%3A%20'Calibri'%2Csans-serif%3B%20mso-bidi-font-family%3A%20Calibri%3B%22%3E%26nbsp%3B%3C%2FSPAN%3E%3C%2FP%3E%0A%3CP%20style%3D%22margin%3A%200in%3B%20margin-bottom%3A%20.0001pt%3B%22%3E%3CSPAN%20style%3D%22font-size%3A%2011.0pt%3B%20font-family%3A%20'Calibri'%2Csans-serif%3B%20mso-bidi-font-family%3A%20Calibri%3B%22%3ESelect%20the%20imported%20Server%20App%20and%20Click%20OK%20to%20continue.%3C%2FSPAN%3E%3C%2FP%3E%0A%3CP%20style%3D%22margin%3A%200in%3B%20margin-bottom%3A%20.0001pt%3B%22%3E%3CSPAN%20style%3D%22font-size%3A%2011.0pt%3B%20font-family%3A%20'Calibri'%2Csans-serif%3B%20mso-bidi-font-family%3A%20Calibri%3B%22%3E%3CSPAN%20class%3D%22lia-inline-image-display-wrapper%20lia-image-align-inline%22%20style%3D%22width%3A%20520px%3B%22%3E%3CIMG%20src%3D%22https%3A%2F%2Fgxcuf89792.i.lithium.com%2Ft5%2Fimage%2Fserverpage%2Fimage-id%2F122330iCDC1B7961FDD2959%2Fimage-dimensions%2F520x469%3Fv%3D1.0%22%20width%3D%22520%22%20height%3D%22469%22%20alt%3D%22image065.png%22%20title%3D%22image065.png%22%20%2F%3E%3C%2FSPAN%3E%26nbsp%3B%3C%2FSPAN%3E%3C%2FP%3E%0A%3CP%20style%3D%22margin%3A%200in%3B%20margin-bottom%3A%20.0001pt%3B%22%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%20style%3D%22margin%3A%200in%3B%20margin-bottom%3A%20.0001pt%3B%22%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%20style%3D%22margin%3A%200in%3B%20margin-bottom%3A%20.0001pt%3B%22%3E%3CSTRONG%3E%3CSPAN%20style%3D%22font-size%3A%2011.0pt%3B%20font-family%3A%20'Calibri'%2Csans-serif%3B%20mso-bidi-font-family%3A%20Calibri%3B%22%3E4.3%20Importing%20Client%2FNative%20App%3C%2FSPAN%3E%3C%2FSTRONG%3E%3C%2FP%3E%0A%3CP%20style%3D%22margin%3A%200in%3B%20margin-bottom%3A%20.0001pt%3B%22%3E%3CSPAN%20style%3D%22font-size%3A%2011.0pt%3B%20font-family%3A%20'Calibri'%2Csans-serif%3B%20mso-bidi-font-family%3A%20Calibri%3B%22%3E%26nbsp%3B%3C%2FSPAN%3E%3C%2FP%3E%0A%3CP%20style%3D%22margin%3A%200in%3B%20margin-bottom%3A%20.0001pt%3B%22%3E%3CSPAN%20style%3D%22font-size%3A%2011.0pt%3B%20font-family%3A%20'Calibri'%2Csans-serif%3B%20mso-bidi-font-family%3A%20Calibri%3B%22%3EValues%20needed%20to%20import%20Client%2FNative%20App%20can%20be%20obtained%20from%20%3CSTRONG%3EStep%203.2%3C%2FSTRONG%3E%20above.%3C%2FSPAN%3E%3C%2FP%3E%0A%3CP%20style%3D%22margin%3A%200in%3B%20margin-bottom%3A%20.0001pt%3B%22%3E%3CSPAN%20style%3D%22font-size%3A%2011.0pt%3B%20font-family%3A%20'Calibri'%2Csans-serif%3B%20mso-bidi-font-family%3A%20Calibri%3B%22%3E%26nbsp%3B%3C%2FSPAN%3E%3C%2FP%3E%0A%3CP%20style%3D%22margin%3A%200in%3B%20margin-bottom%3A%20.0001pt%3B%22%3E%3CSPAN%20style%3D%22font-size%3A%2011.0pt%3B%20font-family%3A%20'Calibri'%2Csans-serif%3B%20mso-bidi-font-family%3A%20Calibri%3B%22%3E%3CSPAN%20class%3D%22lia-inline-image-display-wrapper%20lia-image-align-inline%22%20style%3D%22width%3A%20629px%3B%22%3E%3CIMG%20src%3D%22https%3A%2F%2Fgxcuf89792.i.lithium.com%2Ft5%2Fimage%2Fserverpage%2Fimage-id%2F122331iE49FE72C9099E0AE%2Fimage-size%2Flarge%3Fv%3D1.0%26amp%3Bpx%3D999%22%20alt%3D%22image067.png%22%20title%3D%22image067.png%22%20%2F%3E%3C%2FSPAN%3E%3C%2FSPAN%3E%3C%2FP%3E%0A%3CP%20style%3D%22margin%3A%200in%3B%20margin-bottom%3A%20.0001pt%3B%22%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%20style%3D%22margin%3A%200in%3B%20margin-bottom%3A%20.0001pt%3B%22%3E%3CSPAN%20style%3D%22font-size%3A%2011.0pt%3B%20font-family%3A%20'Calibri'%2Csans-serif%3B%20mso-bidi-font-family%3A%20Calibri%3B%22%3EClick%20OK.%3C%2FSPAN%3E%3C%2FP%3E%0A%3CP%20style%3D%22margin%3A%200in%3B%20margin-bottom%3A%20.0001pt%3B%22%3E%3CSPAN%20style%3D%22font-size%3A%2011.0pt%3B%20font-family%3A%20'Calibri'%2Csans-serif%3B%20mso-bidi-font-family%3A%20Calibri%3B%22%3E%26nbsp%3B%3CSPAN%20class%3D%22lia-inline-image-display-wrapper%20lia-image-align-inline%22%20style%3D%22width%3A%20533px%3B%22%3E%3CIMG%20src%3D%22https%3A%2F%2Fgxcuf89792.i.lithium.com%2Ft5%2Fimage%2Fserverpage%2Fimage-id%2F122332i51E7939E081C2B48%2Fimage-dimensions%2F533x351%3Fv%3D1.0%22%20width%3D%22533%22%20height%3D%22351%22%20alt%3D%22image069.jpg%22%20title%3D%22image069.jpg%22%20%2F%3E%3C%2FSPAN%3E%3C%2FSPAN%3E%3C%2FP%3E%0A%3CP%20style%3D%22margin%3A%200in%3B%20margin-bottom%3A%20.0001pt%3B%22%3E%3CSPAN%20style%3D%22font-size%3A%2011.0pt%3B%20font-family%3A%20'Calibri'%2Csans-serif%3B%20mso-bidi-font-family%3A%20Calibri%3B%22%3E%26nbsp%3B%3C%2FSPAN%3E%3C%2FP%3E%0A%3CP%20style%3D%22margin%3A%200in%3B%20margin-bottom%3A%20.0001pt%3B%22%3E%3CSPAN%20style%3D%22font-size%3A%2011.0pt%3B%20font-family%3A%20'Calibri'%2Csans-serif%3B%20mso-bidi-font-family%3A%20Calibri%3B%22%3ESelect%20the%20imported%20App%20and%20Click%20OK.%3C%2FSPAN%3E%3C%2FP%3E%0A%3CP%20style%3D%22margin%3A%200in%3B%20margin-bottom%3A%20.0001pt%3B%22%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%20style%3D%22margin%3A%200in%3B%20margin-bottom%3A%20.0001pt%3B%22%3E%3CSPAN%20style%3D%22font-size%3A%2011.0pt%3B%20font-family%3A%20'Calibri'%2Csans-serif%3B%20mso-bidi-font-family%3A%20Calibri%3B%22%3E%26nbsp%3B%3CSPAN%20class%3D%22lia-inline-image-display-wrapper%20lia-image-align-inline%22%20style%3D%22width%3A%20557px%3B%22%3E%3CIMG%20src%3D%22https%3A%2F%2Fgxcuf89792.i.lithium.com%2Ft5%2Fimage%2Fserverpage%2Fimage-id%2F122333i37583581FE481763%2Fimage-dimensions%2F557x503%3Fv%3D1.0%22%20width%3D%22557%22%20height%3D%22503%22%20alt%3D%22image071.jpg%22%20title%3D%22image071.jpg%22%20%2F%3E%3C%2FSPAN%3E%3C%2FSPAN%3E%3C%2FP%3E%0A%3CP%20style%3D%22margin%3A%200in%3B%20margin-bottom%3A%20.0001pt%3B%22%3E%3CSPAN%20style%3D%22font-size%3A%2011.0pt%3B%20font-family%3A%20'Calibri'%2Csans-serif%3B%20mso-bidi-font-family%3A%20Calibri%3B%22%3E%26nbsp%3B%3C%2FSPAN%3E%3C%2FP%3E%0A%3CP%20style%3D%22margin%3A%200in%3B%20margin-bottom%3A%20.0001pt%3B%22%3E%3CSPAN%20style%3D%22font-size%3A%2011.0pt%3B%20font-family%3A%20'Calibri'%2Csans-serif%3B%20mso-bidi-font-family%3A%20Calibri%3B%22%3EOn%20this%20screen%2C%20AAD%20User%20Discovery%20can%20be%20enabled.%20This%20is%20required%20if%20you%20want%20AAD%20User%20Token%20Authentication%20to%20work.%20Click%20Next%20to%20complete%20the%20wizard.%20If%20the%20clients%20are%20going%20to%20use%20PKI%20Certificates%2C%20this%20won't%20be%20required.%3C%2FSPAN%3E%3C%2FP%3E%0A%3CP%20style%3D%22margin%3A%200in%3B%20margin-bottom%3A%20.0001pt%3B%22%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%20style%3D%22margin%3A%200in%3B%20margin-bottom%3A%20.0001pt%3B%22%3E%3CSPAN%20style%3D%22font-size%3A%2011.0pt%3B%20font-family%3A%20'Calibri'%2Csans-serif%3B%20mso-bidi-font-family%3A%20Calibri%3B%22%3E%3CSPAN%20class%3D%22lia-inline-image-display-wrapper%20lia-image-align-inline%22%20style%3D%22width%3A%20598px%3B%22%3E%3CIMG%20src%3D%22https%3A%2F%2Fgxcuf89792.i.lithium.com%2Ft5%2Fimage%2Fserverpage%2Fimage-id%2F122334iC1D445AA5AB4AE05%2Fimage-dimensions%2F598x573%3Fv%3D1.0%22%20width%3D%22598%22%20height%3D%22573%22%20alt%3D%22image073.jpg%22%20title%3D%22image073.jpg%22%20%2F%3E%3C%2FSPAN%3E%26nbsp%3B%3C%2FSPAN%3E%3CSPAN%20style%3D%22font-family%3A%20Calibri%2C%20sans-serif%3B%20font-size%3A%2011pt%3B%22%3E%26nbsp%3B%3C%2FSPAN%3E%3C%2FP%3E%0A%3CP%20style%3D%22margin%3A%200in%3B%20margin-bottom%3A%20.0001pt%3B%22%3E%3CSPAN%20style%3D%22font-size%3A%2011.0pt%3B%20font-family%3A%20'Calibri'%2Csans-serif%3B%20mso-bidi-font-family%3A%20Calibri%3B%22%3EClick%20Next%20to%20complete%20the%20wizard.%20At%20this%20stage%2C%20AAD%20User%20Discovery%20should%20run%20and%20you%20can%20monitor%20SMS_AZURE_DISCOVERY_AGENT.LOG%20for%20details.%20%3C%2FSPAN%3E%3C%2FP%3E%0A%3CP%20style%3D%22margin%3A%200in%3B%20margin-bottom%3A%20.0001pt%3B%22%3E%3CSPAN%20style%3D%22font-size%3A%2011.0pt%3B%20font-family%3A%20'Calibri'%2Csans-serif%3B%20mso-bidi-font-family%3A%20Calibri%3B%22%3E%26nbsp%3B%3C%2FSPAN%3E%3C%2FP%3E%0A%3CP%20style%3D%22margin%3A%200in%3B%20margin-bottom%3A%20.0001pt%3B%22%3E%3CSPAN%20style%3D%22font-size%3A%2011.0pt%3B%20font-family%3A%20'Calibri'%2Csans-serif%3B%20mso-bidi-font-family%3A%20Calibri%3B%22%3EIf%20you%20see%20the%20following%20error%2C%20you%20may%20have%20not%20granted%20permissions%20to%20Server%2FWeb%20App%20correctly%20as%20show%20in%20%3CSTRONG%3EStep%202.7.%20%3C%2FSTRONG%3E%3C%2FSPAN%3E%3C%2FP%3E%0A%3CP%20style%3D%22margin%3A%200in%3B%20margin-bottom%3A%20.0001pt%3B%22%3E%3CSPAN%20style%3D%22font-size%3A%2011.0pt%3B%20font-family%3A%20'Calibri'%2Csans-serif%3B%20mso-bidi-font-family%3A%20Calibri%3B%22%3E%26nbsp%3B%3C%2FSPAN%3E%3C%2FP%3E%0A%3CP%20style%3D%22margin%3A%200in%3B%20margin-bottom%3A%20.0001pt%3B%22%3E%3CI%3E%3CSPAN%20style%3D%22font-size%3A%2010.5pt%3B%20font-family%3A%20'Calibri'%2Csans-serif%3B%20mso-bidi-font-family%3A%20Calibri%3B%22%3EERROR%3A%20Error%20occurred.%20%3CSPAN%20class%3D%22SpellE%22%3EStatusCode%3C%2FSPAN%3E%20%3D%20Forbidden%2C%20reason%20%3D%20Forbidden%26nbsp%3B%26nbsp%3B%26nbsp%3B%26nbsp%3B%26nbsp%3B%26nbsp%3B%26nbsp%3B%26nbsp%3BSMS_AZUREAD_DISCOVERY_AGENT%3C%2FSPAN%3E%3C%2FI%3E%3C%2FP%3E%0A%3CP%20style%3D%22margin%3A%200in%3B%20margin-bottom%3A%20.0001pt%3B%22%3E%3CI%3E%3CSPAN%20style%3D%22font-size%3A%2010.5pt%3B%20font-family%3A%20'Calibri'%2Csans-serif%3B%20mso-bidi-font-family%3A%20Calibri%3B%22%3EERROR%3A%20Sync%20request%20failed.%20Exception%3A%20%3CSPAN%20class%3D%22SpellE%22%3ESystem.Net.WebException%3C%2FSPAN%3E%3A%20Forbidden%3A%20Forbidden~~%3CSPAN%20style%3D%22mso-spacerun%3A%20yes%3B%22%3E%26nbsp%3B%26nbsp%3B%20%3C%2FSPAN%3Eat%20Microsoft.ConfigurationManager.AzureADDiscovery.AzureADQueryClient.GetAzureADQueryResult(String%20%3CSPAN%20class%3D%22SpellE%22%3EgraphRequest%3C%2FSPAN%3E)~~%3CSPAN%20style%3D%22mso-spacerun%3A%20yes%3B%22%3E%26nbsp%3B%26nbsp%3B%20%3C%2FSPAN%3Eat%20Microsoft.ConfigurationManager.AzureADDiscovery.AzureADSyncManager.Sync(Boolean%20%3CSPAN%20class%3D%22SpellE%22%3ErunFullSync%3C%2FSPAN%3E)%20~~%20Retrying%20after%2030%20seconds...%26nbsp%3B%26nbsp%3B%26nbsp%3B%26nbsp%3B%26nbsp%3B%26nbsp%3B%26nbsp%3B%26nbsp%3BSMS_AZUREAD_DISCOVERY_AGENT%26nbsp%3B%26nbsp%3B%26nbsp%3B%26nbsp%3B%26nbsp%3B%26nbsp%3B%26nbsp%3B%26nbsp%3B%3C%2FSPAN%3E%3C%2FI%3E%3C%2FP%3E%0A%3CP%20style%3D%22margin%3A%200in%3B%20margin-bottom%3A%20.0001pt%3B%22%3E%3CSPAN%20style%3D%22font-size%3A%2011.0pt%3B%20font-family%3A%20'Calibri'%2Csans-serif%3B%20mso-bidi-font-family%3A%20Calibri%3B%22%3E%26nbsp%3B%3C%2FSPAN%3E%3C%2FP%3E%0A%3CP%20style%3D%22margin%3A%200in%3B%20margin-bottom%3A%20.0001pt%3B%22%3E%3CSTRONG%3E%3CSPAN%20style%3D%22font-size%3A%2014.0pt%3B%20font-family%3A%20'Calibri'%2Csans-serif%3B%20mso-bidi-font-family%3A%20Calibri%3B%22%3E5.%20Installing%20CMG%3C%2FSPAN%3E%3C%2FSTRONG%3E%3C%2FP%3E%0A%3CP%20style%3D%22margin%3A%200in%3B%20margin-bottom%3A%20.0001pt%3B%22%3E%3CSPAN%20style%3D%22font-size%3A%2011.0pt%3B%20font-family%3A%20'Calibri'%2Csans-serif%3B%20mso-bidi-font-family%3A%20Calibri%3B%22%3E%26nbsp%3B%3C%2FSPAN%3E%3C%2FP%3E%0A%3CP%20style%3D%22margin%3A%200in%3B%20margin-bottom%3A%20.0001pt%3B%22%3E%3CSTRONG%3E%3CSPAN%20style%3D%22font-size%3A%2011.0pt%3B%20font-family%3A%20'Calibri'%2Csans-serif%3B%20mso-bidi-font-family%3A%20Calibri%3B%22%3E5.1%20Run%20%3CI%3ECreate%20Cloud%20Management%20Gateway%3C%2FI%3E%20wizard%3C%2FSPAN%3E%3C%2FSTRONG%3E%3C%2FP%3E%0A%3CP%20style%3D%22margin%3A%200in%3B%20margin-bottom%3A%20.0001pt%3B%22%3E%3CSPAN%20style%3D%22font-size%3A%2011.0pt%3B%20font-family%3A%20'Calibri'%2Csans-serif%3B%20mso-bidi-font-family%3A%20Calibri%3B%22%3E%26nbsp%3B%3C%2FSPAN%3E%3C%2FP%3E%0A%3CP%20style%3D%22margin%3A%200in%3B%20margin-bottom%3A%20.0001pt%3B%22%3E%3CSPAN%20style%3D%22font-size%3A%2011.0pt%3B%20font-family%3A%20'Calibri'%2Csans-serif%3B%20mso-bidi-font-family%3A%20Calibri%3B%22%3EAdministration-%26gt%3B%20Cloud%20Services%20-%26gt%3B%20Cloud%20Management%20Gateway%20-%26gt%3B%20Create%20Cloud%20Management%20Gateway%3C%2FSPAN%3E%3C%2FP%3E%0A%3CP%20style%3D%22margin%3A%200in%3B%20margin-bottom%3A%20.0001pt%3B%22%3E%3CSPAN%20style%3D%22font-size%3A%2011.0pt%3B%20font-family%3A%20'Calibri'%2Csans-serif%3B%20mso-bidi-font-family%3A%20Calibri%3B%22%3E%26nbsp%3B%3C%2FSPAN%3E%3C%2FP%3E%0A%3CP%20style%3D%22margin%3A%200in%3B%20margin-bottom%3A%20.0001pt%3B%22%3E%3CSPAN%20style%3D%22font-size%3A%2011.0pt%3B%20font-family%3A%20'Calibri'%2Csans-serif%3B%20mso-bidi-font-family%3A%20Calibri%3B%22%3E%3CSPAN%20class%3D%22lia-inline-image-display-wrapper%20lia-image-align-inline%22%20style%3D%22width%3A%20685px%3B%22%3E%3CIMG%20src%3D%22https%3A%2F%2Fgxcuf89792.i.lithium.com%2Ft5%2Fimage%2Fserverpage%2Fimage-id%2F122335i6B78983D6D35821F%2Fimage-dimensions%2F685x533%3Fv%3D1.0%22%20width%3D%22685%22%20height%3D%22533%22%20alt%3D%22image075.jpg%22%20title%3D%22image075.jpg%22%20%2F%3E%3C%2FSPAN%3E%3C%2FSPAN%3E%3C%2FP%3E%0A%3CP%20style%3D%22margin%3A%200in%3B%20margin-bottom%3A%20.0001pt%3B%22%3E%3CSPAN%20style%3D%22font-size%3A%2011.0pt%3B%20font-family%3A%20'Calibri'%2Csans-serif%3B%20mso-bidi-font-family%3A%20Calibri%3B%22%3E%26nbsp%3B%3C%2FSPAN%3E%3C%2FP%3E%0A%3CP%20style%3D%22margin%3A%200in%3B%20margin-bottom%3A%20.0001pt%3B%22%3E%3CSPAN%20style%3D%22font-size%3A%2011.0pt%3B%20font-family%3A%20'Calibri'%2Csans-serif%3B%20mso-bidi-font-family%3A%20Calibri%3B%22%3EAfter%20signing%20in%20with%20AAD%20credentials%2C%20if%20you%20are%20not%20seeing%20Subscription%20ID%20as%20shown%20in%20screen%20below%2C%20it%20means%20the%20account%20used%20doesn't%20have%20proper%20access%20at%20Subscription%20level.%3C%2FSPAN%3E%3C%2FP%3E%0A%3CP%20style%3D%22margin%3A%200in%3B%20margin-bottom%3A%20.0001pt%3B%22%3E%3CSPAN%20style%3D%22font-size%3A%2011.0pt%3B%20font-family%3A%20'Calibri'%2Csans-serif%3B%20mso-bidi-font-family%3A%20Calibri%3B%22%3E%26nbsp%3B%3CSPAN%20class%3D%22lia-inline-image-display-wrapper%20lia-image-align-inline%22%20style%3D%22width%3A%20647px%3B%22%3E%3CIMG%20src%3D%22https%3A%2F%2Fgxcuf89792.i.lithium.com%2Ft5%2Fimage%2Fserverpage%2Fimage-id%2F122336i519732420B36F59D%2Fimage-dimensions%2F647x670%3Fv%3D1.0%22%20width%3D%22647%22%20height%3D%22670%22%20alt%3D%22image077.jpg%22%20title%3D%22image077.jpg%22%20%2F%3E%3C%2FSPAN%3E%3C%2FSPAN%3E%3C%2FP%3E%0A%3CP%20style%3D%22margin%3A%200in%3B%20margin-bottom%3A%20.0001pt%3B%22%3E%3CSPAN%20style%3D%22font-size%3A%2011.0pt%3B%20font-family%3A%20'Calibri'%2Csans-serif%3B%20mso-bidi-font-family%3A%20Calibri%3B%22%3E%26nbsp%3B%3C%2FSPAN%3E%3C%2FP%3E%0A%3CP%20style%3D%22margin%3A%200in%3B%20margin-bottom%3A%20.0001pt%3B%22%3E%3CSPAN%20style%3D%22font-size%3A%2011.0pt%3B%20font-family%3A%20'Calibri'%2Csans-serif%3B%20mso-bidi-font-family%3A%20Calibri%3B%22%3EThe%20user%20credentials%20used%20to%20sign%20in%20here%20must%20either%20be%20of%20a%20%3CSTRONG%3ECo-Administrator%3C%2FSTRONG%3E%20or%20Subscription%20%3CSTRONG%3EOwner%3C%2FSTRONG%3E%20to%20see%20the%20Subscription%20populated%20in%20the%20Wizard.%3C%2FSPAN%3E%3C%2FP%3E%0A%3CP%20style%3D%22margin%3A%200in%3B%20margin-bottom%3A%20.0001pt%3B%22%3E%3CSPAN%20style%3D%22font-size%3A%2011.0pt%3B%20font-family%3A%20'Calibri'%2Csans-serif%3B%20mso-bidi-font-family%3A%20Calibri%3B%22%3E%26nbsp%3B%3CSPAN%20class%3D%22lia-inline-image-display-wrapper%20lia-image-align-inline%22%20style%3D%22width%3A%20999px%3B%22%3E%3CIMG%20src%3D%22https%3A%2F%2Fgxcuf89792.i.lithium.com%2Ft5%2Fimage%2Fserverpage%2Fimage-id%2F122337i393C50F06A45698E%2Fimage-size%2Flarge%3Fv%3D1.0%26amp%3Bpx%3D999%22%20alt%3D%22image079.jpg%22%20title%3D%22image079.jpg%22%20%2F%3E%3C%2FSPAN%3E%3C%2FSPAN%3E%3C%2FP%3E%0A%3CP%20style%3D%22margin%3A%200in%3B%20margin-bottom%3A%20.0001pt%3B%22%3E%3CSPAN%20style%3D%22font-size%3A%2011.0pt%3B%20font-family%3A%20'Calibri'%2Csans-serif%3B%20mso-bidi-font-family%3A%20Calibri%3B%22%3E%26nbsp%3B%3C%2FSPAN%3E%3C%2FP%3E%0A%3CP%20style%3D%22margin%3A%200in%3B%20margin-bottom%3A%20.0001pt%3B%22%3E%3CSPAN%20style%3D%22font-size%3A%2011.0pt%3B%20font-family%3A%20'Calibri'%2Csans-serif%3B%20mso-bidi-font-family%3A%20Calibri%3B%22%3EOR%3C%2FSPAN%3E%3C%2FP%3E%0A%3CP%20style%3D%22margin%3A%200in%3B%20margin-bottom%3A%20.0001pt%3B%22%3E%3CSPAN%20style%3D%22font-size%3A%2011.0pt%3B%20font-family%3A%20'Calibri'%2Csans-serif%3B%20mso-bidi-font-family%3A%20Calibri%3B%22%3E%26nbsp%3B%3C%2FSPAN%3E%3C%2FP%3E%0A%3CP%20style%3D%22margin%3A%200in%3B%20margin-bottom%3A%20.0001pt%3B%22%3E%3CSPAN%20style%3D%22font-size%3A%2011.0pt%3B%20font-family%3A%20'Calibri'%2Csans-serif%3B%20mso-bidi-font-family%3A%20Calibri%3B%22%3E%3CSPAN%20class%3D%22lia-inline-image-display-wrapper%20lia-image-align-inline%22%20style%3D%22width%3A%20999px%3B%22%3E%3CIMG%20src%3D%22https%3A%2F%2Fgxcuf89792.i.lithium.com%2Ft5%2Fimage%2Fserverpage%2Fimage-id%2F122338i28171E640D347263%2Fimage-size%2Flarge%3Fv%3D1.0%26amp%3Bpx%3D999%22%20alt%3D%22image081.jpg%22%20title%3D%22image081.jpg%22%20%2F%3E%3C%2FSPAN%3E%3C%2FSPAN%3E%3C%2FP%3E%0A%3CP%20style%3D%22margin%3A%200in%3B%20margin-bottom%3A%20.0001pt%3B%22%3E%3CSPAN%20style%3D%22font-size%3A%2011.0pt%3B%20font-family%3A%20'Calibri'%2Csans-serif%3B%20mso-bidi-font-family%3A%20Calibri%3B%22%3E%26nbsp%3B%3C%2FSPAN%3E%3C%2FP%3E%0A%3CP%20style%3D%22margin%3A%200in%3B%20margin-bottom%3A%20.0001pt%3B%22%3E%3CSTRONG%3E%3CSPAN%20style%3D%22font-size%3A%2011.0pt%3B%20font-family%3A%20'Calibri'%2Csans-serif%3B%20mso-bidi-font-family%3A%20Calibri%3B%22%3E5.2%3C%2FSPAN%3E%3C%2FSTRONG%3E%3CSPAN%20style%3D%22font-size%3A%2011.0pt%3B%20font-family%3A%20'Calibri'%2Csans-serif%3B%20mso-bidi-font-family%3A%20Calibri%3B%22%3E%20Complete%20the%20remaining%20steps%20to%20complete%20the%20creation%20of%20Cloud%20Management%20Gateway.%3C%2FSPAN%3E%3C%2FP%3E%0A%3CP%20style%3D%22margin%3A%200in%3B%20margin-bottom%3A%20.0001pt%3B%22%3E%3CSTRONG%3E%3CSPAN%20style%3D%22font-size%3A%2011.0pt%3B%20font-family%3A%20'Calibri'%2Csans-serif%3B%20mso-bidi-font-family%3A%20Calibri%3B%22%3ECertificate%20file%3C%2FSPAN%3E%3C%2FSTRONG%3E%3CSPAN%20style%3D%22font-size%3A%2011.0pt%3B%20font-family%3A%20'Calibri'%2Csans-serif%3B%20mso-bidi-font-family%3A%20Calibri%3B%22%3E%3A%20You%20need%20a%20.PFX%20(Cert%20with%20Private%20key%20exported).%20Look%20at%20this%20link%20for%20details%20%3C%2FSPAN%3E%3CA%20href%3D%22https%3A%2F%2Fdocs.microsoft.com%2Fen-us%2Fsccm%2Fcore%2Fclients%2Fmanage%2Fcmg%2Fcertificates-for-cloud-management-gateway%23bkmk_serverauthpublic%22%20target%3D%22_blank%22%20rel%3D%22noopener%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%22%3E%3CSPAN%20style%3D%22font-size%3A%2011.0pt%3B%20font-family%3A%20'Calibri'%2Csans-serif%3B%20mso-bidi-font-family%3A%20Calibri%3B%22%3Ehttps%3A%2F%2Fdocs.microsoft.com%2Fen-us%2Fsccm%2Fcore%2Fclients%2Fmanage%2Fcmg%2Fcertificates-for-cloud-management-gateway%23bkmk_serverauthpublic%3C%2FSPAN%3E%3C%2FA%3E%3C%2FP%3E%0A%3CP%20style%3D%22margin%3A%200in%3B%20margin-bottom%3A%20.0001pt%3B%22%3E%3CI%3E%3CSPAN%20style%3D%22font-size%3A%2011.0pt%3B%20font-family%3A%20'Calibri'%2Csans-serif%3B%20mso-bidi-font-family%3A%20Calibri%3B%22%3ENote%3A%20Select%20the%20remaining%20options%20depending%20on%20your%20requirements.%20If%20public%20CA%20Cert%20is%20used%20for%20CMG%20and%20Clients%20are%20going%20to%20use%20AAD%20Token%20Auth%2C%20you%20don't%20need%20to%20specify%20and%20upload%20any%20additional%20root%2Fintermediate%20certificates.%20%3C%2FSPAN%3E%3C%2FI%3E%3C%2FP%3E%0A%3CP%20style%3D%22margin%3A%200in%3B%20margin-bottom%3A%20.0001pt%3B%22%3E%3CI%3E%3CSPAN%20style%3D%22font-size%3A%2011.0pt%3B%20font-family%3A%20'Calibri'%2Csans-serif%3B%20mso-bidi-font-family%3A%20Calibri%3B%22%3EIn%20case%20you%20use%20Internal%20CA%20Cert%20for%20CMG%20or%20for%20Client%20Authentication%2C%20you%20may%20have%20to%20upload%20respective%20Root%20and%20Intermediate%20certificates.%3C%2FSPAN%3E%3C%2FI%3E%3C%2FP%3E%0A%3CP%20style%3D%22margin%3A%200in%3B%20margin-bottom%3A%20.0001pt%3B%22%3E%3CSPAN%20style%3D%22font-size%3A%2011.0pt%3B%20font-family%3A%20'Calibri'%2Csans-serif%3B%20mso-bidi-font-family%3A%20Calibri%3B%22%3E%26nbsp%3B%3C%2FSPAN%3E%3C%2FP%3E%0A%3CP%20style%3D%22margin%3A%200in%3B%20margin-bottom%3A%20.0001pt%3B%22%3E%3CSPAN%20style%3D%22font-size%3A%2011.0pt%3B%20font-family%3A%20'Calibri'%2Csans-serif%3B%20mso-bidi-font-family%3A%20Calibri%3B%22%3E%3CSPAN%20class%3D%22lia-inline-image-display-wrapper%20lia-image-align-inline%22%20style%3D%22width%3A%20668px%3B%22%3E%3CIMG%20src%3D%22https%3A%2F%2Fgxcuf89792.i.lithium.com%2Ft5%2Fimage%2Fserverpage%2Fimage-id%2F122339i658682E7DF07B83B%2Fimage-dimensions%2F668x691%3Fv%3D1.0%22%20width%3D%22668%22%20height%3D%22691%22%20alt%3D%22image083.jpg%22%20title%3D%22image083.jpg%22%20%2F%3E%3C%2FSPAN%3E%3C%2FSPAN%3E%3C%2FP%3E%0A%3CP%20style%3D%22margin%3A%200in%3B%20margin-bottom%3A%20.0001pt%3B%22%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%20style%3D%22margin%3A%200in%3B%20margin-bottom%3A%20.0001pt%3B%22%3E%3CSPAN%20style%3D%22font-size%3A%2011.0pt%3B%20font-family%3A%20'Calibri'%2Csans-serif%3B%20mso-bidi-font-family%3A%20Calibri%3B%22%3EConfigure%20Alerts%20in%20the%20next%20screen%20and%20complete%20the%20Wizard.%20%3C%2FSPAN%3E%3C%2FP%3E%0A%3CP%20style%3D%22margin%3A%200in%3B%20margin-bottom%3A%20.0001pt%3B%22%3E%3CSPAN%20style%3D%22font-size%3A%2011.0pt%3B%20font-family%3A%20'Calibri'%2Csans-serif%3B%20mso-bidi-font-family%3A%20Calibri%3B%22%3E%26nbsp%3B%3C%2FSPAN%3E%3C%2FP%3E%0A%3CP%20style%3D%22margin%3A%200in%3B%20margin-bottom%3A%20.0001pt%3B%22%3E%3CSTRONG%3E%3CSPAN%20style%3D%22font-size%3A%2014.0pt%3B%20font-family%3A%20'Calibri'%2Csans-serif%3B%20mso-bidi-font-family%3A%20Calibri%3B%22%3ECommon%20Installation%20errors%3A%3C%2FSPAN%3E%3C%2FSTRONG%3E%3C%2FP%3E%0A%3CP%20style%3D%22margin%3A%200in%3B%20margin-bottom%3A%20.0001pt%3B%22%3E%3CSPAN%20style%3D%22font-size%3A%2011.0pt%3B%20font-family%3A%20'Calibri'%2Csans-serif%3B%20mso-bidi-font-family%3A%20Calibri%3B%22%3E%26nbsp%3B%3C%2FSPAN%3E%3C%2FP%3E%0A%3CP%20class%3D%22MsoNormal%22%3E%3CSPAN%20class%3D%22normaltextrun%22%3E%3CSPAN%20style%3D%22mso-ascii-font-family%3A%20Calibri%3B%20mso-hansi-font-family%3A%20Calibri%3B%20mso-bidi-font-family%3A%20Calibri%3B%20color%3A%20black%3B%22%3EYou%20should%20monitor%20CMG%20status%20in%20the%20console%20and%20make%20sure%20it%20is%20in%20%22Ready%22%20state%3C%2FSPAN%3E%3C%2FSPAN%3E%3C%2FP%3E%0A%3CP%20style%3D%22margin%3A%200in%3B%20margin-bottom%3A%20.0001pt%3B%22%3E%3CSPAN%20style%3D%22font-size%3A%2011.0pt%3B%20font-family%3A%20'Calibri'%2Csans-serif%3B%20mso-bidi-font-family%3A%20Calibri%3B%20mso-no-proof%3A%20yes%3B%22%3E%3CSPAN%20class%3D%22lia-inline-image-display-wrapper%20lia-image-align-inline%22%20style%3D%22width%3A%20999px%3B%22%3E%3CIMG%20src%3D%22https%3A%2F%2Fgxcuf89792.i.lithium.com%2Ft5%2Fimage%2Fserverpage%2Fimage-id%2F122340i91AB990157160674%2Fimage-size%2Flarge%3Fv%3D1.0%26amp%3Bpx%3D999%22%20alt%3D%22image085.jpg%22%20title%3D%22image085.jpg%22%20%2F%3E%3C%2FSPAN%3E%3C%2FSPAN%3E%3C%2FP%3E%0A%3CP%20style%3D%22margin%3A%200in%3B%20margin-bottom%3A%20.0001pt%3B%22%3E%3CSPAN%20style%3D%22font-size%3A%2011.0pt%3B%20font-family%3A%20'Calibri'%2Csans-serif%3B%20mso-bidi-font-family%3A%20Calibri%3B%22%3E%26nbsp%3B%3C%2FSPAN%3E%3C%2FP%3E%0A%3CP%20style%3D%22margin%3A%200in%3B%20margin-bottom%3A%20.0001pt%3B%22%3E%3CSPAN%20style%3D%22font-size%3A%2011.0pt%3B%20font-family%3A%20'Calibri'%2Csans-serif%3B%20mso-bidi-font-family%3A%20Calibri%3B%22%3EIf%20the%20status%20is%20in%20error%20Status%2C%20look%20at%20%3CI%3EProgram%20Files%5CMicrosoft%20Configuration%20Manager%5CLogs%5C%3CSTRONG%3ECloudmgr.log%3C%2FSTRONG%3E%3C%2FI%3E%20for%20details.%3C%2FSPAN%3E%3C%2FP%3E%0A%3CP%20style%3D%22margin%3A%200in%3B%20margin-bottom%3A%20.0001pt%3B%22%3E%3CSPAN%20style%3D%22font-size%3A%2011.0pt%3B%20font-family%3A%20'Calibri'%2Csans-serif%3B%20mso-bidi-font-family%3A%20Calibri%3B%22%3E%26nbsp%3B%3C%2FSPAN%3E%3C%2FP%3E%0A%3CP%20style%3D%22margin%3A%200in%3B%20margin-bottom%3A%20.0001pt%3B%22%3E%3CI%3E%3CSPAN%20style%3D%22font-size%3A%2010.5pt%3B%20font-family%3A%20'Calibri'%2Csans-serif%3B%20mso-bidi-font-family%3A%20Calibri%3B%22%3EERROR%3A%20Exception%20%3CSPAN%20class%3D%22SpellE%22%3Eoccured%3C%2FSPAN%3E%20for%20service%20%3CSPAN%20class%3D%22SpellE%22%3Esecondcmg%3C%2FSPAN%3E%20%3A%20%3CSPAN%20class%3D%22SpellE%22%3EHyak.Common.CloudException%3C%2FSPAN%3E%3A%20%3CSPAN%20class%3D%22SpellE%22%3EAuthorizationFailed%3C%2FSPAN%3E%3A%20The%20client%20'27bbb19d-e564-4a7c-bd35-5c10db79ca6d'%20with%20object%20id%20'27bbb19d-e564-4a7c-bd35-5c10db79ca6d'%20d%3CSPAN%20style%3D%22background%3A%20yellow%3B%20mso-highlight%3A%20yellow%3B%22%3Eoes%20not%20have%20authorization%20to%20perform%20action%20'%3CSPAN%20class%3D%22SpellE%22%3EMicrosoft.ClassicCompute%3C%2FSPAN%3E%2F%3CSPAN%20class%3D%22SpellE%22%3EdomainNames%3C%2FSPAN%3E%2Fslots%2Fread'%3C%2FSPAN%3E%20over%20scope%20'%2Fsubscriptions%2Fa43a12fa-d3f4-468e-bc84-b40357861640%2Fresourcegroups%2Fsecondcmg%2Fproviders%2FMicrosoft.ClassicCompute%2FdomainNames%2Fsecondcmg%2Fslots%2FProduction'.~~%3CSPAN%20style%3D%22mso-spacerun%3A%20yes%3B%22%3E%26nbsp%3B%26nbsp%3B%20%3C%2FSPAN%3Eat%20Microsoft.Runtime.CompilerServices.TaskAwaiter.ThrowForNonSuccess(Task%20task)~~%3CSPAN%20style%3D%22mso-spacerun%3A%20yes%3B%22%3E%26nbsp%3B%26nbsp%3B%20%3C%2FSPAN%3Eat%20Microsoft.Runtime.CompilerServices.TaskAwaiter.HandleNonSuccess(Task%20task)~~%3CSPAN%20style%3D%22mso-spacerun%3A%20yes%3B%22%3E%26nbsp%3B%26nbsp%3B%20%3C%2FSPAN%3Eat%20Microsoft.Azure.Management.Resources.ResourceOperationsExtensions.CheckExistence(IResourceOperations%20operations%2C%20String%20%3CSPAN%20class%3D%22SpellE%22%3EresourceGroupName%3C%2FSPAN%3E%2C%20%3CSPAN%20class%3D%22SpellE%22%3EResourceIdentity%3C%2FSPAN%3E%20identity)~~%3CSPAN%20style%3D%22mso-spacerun%3A%20yes%3B%22%3E%26nbsp%3B%26nbsp%3B%20%3C%2FSPAN%3Eat%20Microsoft.ConfigurationManager.AzureManagement.ResourceManager.CloudServiceDeploymentSlotExists(String%20%3CSPAN%20class%3D%22SpellE%22%3EresourceGroupName%3C%2FSPAN%3E%2C%20String%20%3CSPAN%20class%3D%22SpellE%22%3EcloudServiceName%3C%2FSPAN%3E%2C%20String%20%3CSPAN%20class%3D%22SpellE%22%3EdeploymentSlot%3C%2FSPAN%3E)~~%3CSPAN%20style%3D%22mso-spacerun%3A%20yes%3B%22%3E%26nbsp%3B%26nbsp%3B%20%3C%2FSPAN%3Eat%20Microsoft.ConfigurationManager.CloudServicesManager.CreateDeploymentTask.Start(Object%20%3CSPAN%20class%3D%22SpellE%22%3EtaskState%3C%2FSPAN%3E).%26nbsp%3B%26nbsp%3B%26nbsp%3B%26nbsp%3B%26nbsp%3B%26nbsp%3B%26nbsp%3B%26nbsp%3BSMS_CLOUD_SERVICES_MANAGER%26nbsp%3B%26nbsp%3B%26nbsp%3B%26nbsp%3B%26nbsp%3B%26nbsp%3B%26nbsp%3B%26nbsp%3B%3C%2FSPAN%3E%3C%2FI%3E%3C%2FP%3E%0A%3CP%20style%3D%22margin%3A%200in%3B%20margin-bottom%3A%20.0001pt%3B%22%3E%3CSPAN%20style%3D%22font-size%3A%2011.0pt%3B%20font-family%3A%20'Calibri'%2Csans-serif%3B%20mso-bidi-font-family%3A%20Calibri%3B%22%3E%26nbsp%3B%3C%2FSPAN%3E%3C%2FP%3E%0A%3CP%20style%3D%22margin%3A%200in%3B%20margin-bottom%3A%20.0001pt%3B%22%3E%3CSPAN%20style%3D%22font-size%3A%2011.0pt%3B%20font-family%3A%20'Calibri'%2Csans-serif%3B%20mso-bidi-font-family%3A%20Calibri%3B%22%3ETo%20fix%20the%20above%20error%2C%20go%20to%20All%20Services%20-%26gt%3B%20Subscriptions%20-%26gt%3B%20Select%20the%20appropriate%20Subscription%20-%26gt%3B%20Resource%20Providers%20-%26gt%3B%20%3CSPAN%20class%3D%22SpellE%22%3EMicrosoft.ClassCompute%3C%2FSPAN%3E%20%26lt%3B-%20Register%3C%2FSPAN%3E%3C%2FP%3E%0A%3CP%20style%3D%22margin%3A%200in%3B%20margin-bottom%3A%20.0001pt%3B%22%3E%3CSPAN%20style%3D%22font-size%3A%2011.0pt%3B%20font-family%3A%20'Calibri'%2Csans-serif%3B%20mso-bidi-font-family%3A%20Calibri%3B%22%3E%26nbsp%3B%3C%2FSPAN%3E%3C%2FP%3E%0A%3CP%20style%3D%22margin%3A%200in%3B%20margin-bottom%3A%20.0001pt%3B%22%3E%3CSPAN%20style%3D%22font-size%3A%2011.0pt%3B%20font-family%3A%20'Calibri'%2Csans-serif%3B%20mso-bidi-font-family%3A%20Calibri%3B%22%3E%3CSPAN%20class%3D%22lia-inline-image-display-wrapper%20lia-image-align-inline%22%20style%3D%22width%3A%20999px%3B%22%3E%3CIMG%20src%3D%22https%3A%2F%2Fgxcuf89792.i.lithium.com%2Ft5%2Fimage%2Fserverpage%2Fimage-id%2F122341i6B077587DD4ECAEE%2Fimage-size%2Flarge%3Fv%3D1.0%26amp%3Bpx%3D999%22%20alt%3D%22image087.jpg%22%20title%3D%22image087.jpg%22%20%2F%3E%3C%2FSPAN%3E%3C%2FSPAN%3E%3C%2FP%3E%0A%3CP%20style%3D%22margin%3A%200in%3B%20margin-bottom%3A%20.0001pt%3B%22%3E%3CSPAN%20style%3D%22font-size%3A%2011.0pt%3B%20font-family%3A%20'Calibri'%2Csans-serif%3B%20mso-bidi-font-family%3A%20Calibri%3B%22%3E%26nbsp%3B%3C%2FSPAN%3E%3C%2FP%3E%0A%3CP%20style%3D%22margin%3A%200in%3B%20margin-bottom%3A%20.0001pt%3B%22%3E%3CSPAN%20style%3D%22font-size%3A%2011.0pt%3B%20font-family%3A%20'Calibri'%2Csans-serif%3B%20mso-bidi-font-family%3A%20Calibri%3B%22%3ESimilarly%2C%20you%20may%20get%20an%20error%20for%20%3CSPAN%20class%3D%22SpellE%22%3E%3CI%3EMicrosoft.Storage%3C%2FI%3E%3C%2FSPAN%3E%20provider%20if%20it%20is%20not%20registered.%20Go%20ahead%20and%20register%20%3CSPAN%20class%3D%22SpellE%22%3E%3CI%3EMicrosoft.Storage%3C%2FI%3E%3C%2FSPAN%3E%20as%20we%20registered%20%3CSPAN%20class%3D%22SpellE%22%3E%3CI%3EMicrosoft.ClassicCompute%3C%2FI%3E%3C%2FSPAN%3E%20above.%3C%2FSPAN%3E%3C%2FP%3E%0A%3CP%20style%3D%22margin%3A%200in%3B%20margin-bottom%3A%20.0001pt%3B%22%3E%3CSPAN%20style%3D%22font-size%3A%2011.0pt%3B%20font-family%3A%20'Calibri'%2Csans-serif%3B%20mso-bidi-font-family%3A%20Calibri%3B%22%3E%26nbsp%3B%3C%2FSPAN%3E%3C%2FP%3E%0A%3CP%20style%3D%22margin%3A%200in%3B%20margin-bottom%3A%20.0001pt%3B%22%3E%3CI%3E%3CSPAN%20style%3D%22font-size%3A%2010.5pt%3B%20font-family%3A%20'Calibri'%2Csans-serif%3B%20mso-bidi-font-family%3A%20Calibri%3B%22%3EERROR%3A%20Resource%20Manager%20-%20Deployment%20operation%20details%3A%20%7B%22value%22%3A%5B%7B%22id%22%3A%22%2Fsubscriptions%2Fa43a12fa-d3f4-468e-bc84-b40357861640%2FresourceGroups%2Fsecondcmg%2Fproviders%2FMicrosoft.Resources%2Fdeployments%2FCreateStorageServicef776f7ca-13a0-4048-8c41-5249b20ae97b%2Foperations%2F1793C29ACC9770E1%22%2C%22operationId%22%3A%221793C29ACC9770E1%22%2C%22properties%22%3A%7B%22provisioningOperation%22%3A%22Create%22%2C%22provisioningState%22%3A%22Failed%22%2C%22timestamp%22%3A%222019-06-30T23%3A28%3A00.1224348Z%22%2C%22duration%22%3A%22PT6.7336014S%22%2C%22trackingId%22%3A%22901c9599-3491-407c-9921-40ef495864d5%22%2C%22statusCode%22%3A%22Conflict%22%2C%22statusMessage%22%3A%7B%22error%22%3A%7B%22code%22%3A%22MissingSubscriptionRegistration%22%2C%22message%22%3A%22%3CSPAN%20style%3D%22background%3A%20yellow%3B%20mso-highlight%3A%20yellow%3B%22%3EThe%20subscription%20is%20not%20registered%20to%20use%20namespace%20'%3CSPAN%20class%3D%22SpellE%22%3EMicrosoft.Storage%3C%2FSPAN%3E'%3C%2FSPAN%3E.%20See%20%3C%2FSPAN%3E%3C%2FI%3E%3CA%20href%3D%22https%3A%2F%2Faka.ms%2Frps-not-found%22%20target%3D%22_blank%22%20rel%3D%22noopener%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%22%3E%3CI%3E%3CSPAN%20style%3D%22font-size%3A%2010.5pt%3B%20font-family%3A%20'Calibri'%2Csans-serif%3B%20mso-bidi-font-family%3A%20Calibri%3B%22%3Ehttps%3A%2F%2Faka.ms%2Frps-not-found%3C%2FSPAN%3E%3C%2FI%3E%3C%2FA%3E%3CI%3E%3CSPAN%20style%3D%22font-size%3A%2010.5pt%3B%20font-family%3A%20'Calibri'%2Csans-serif%3B%20mso-bidi-font-family%3A%20Calibri%3B%22%3E%20for%20how%20to%20register%20subscriptions.%22%2C%22details%22%3A%5B%7B%22code%22%3A%22MissingSubscriptionRegistration%22%2C%22target%22%3A%22Microsoft.Storage%22%2C%22message%22%3A%22The%20subscription%20is%20not%20registered%20to%20use%20namespace%20'%3CSPAN%20class%3D%22SpellE%22%3EMicrosoft.Storage%3C%2FSPAN%3E'.%20See%20%3C%2FSPAN%3E%3C%2FI%3E%3CA%20href%3D%22https%3A%2F%2Faka.ms%2Frps-not-found%22%20target%3D%22_blank%22%20rel%3D%22noopener%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%22%3E%3CI%3E%3CSPAN%20style%3D%22font-size%3A%2010.5pt%3B%20font-family%3A%20'Calibri'%2Csans-serif%3B%20mso-bidi-font-family%3A%20Calibri%3B%22%3Ehttps%3A%2F%2Faka.ms%2Frps-not-found%3C%2FSPAN%3E%3C%2FI%3E%3C%2FA%3E%3CI%3E%3CSPAN%20style%3D%22font-size%3A%2010.5pt%3B%20font-family%3A%20'Calibri'%2Csans-serif%3B%20mso-bidi-font-family%3A%20Calibri%3B%22%3E%20for%20how%20to%20register%20subscriptions.%22%7D%5D%7D%7D%2C%22targetResource%22%3A%7B%22id%22%3A%22%2Fsubscriptions%2Fa43a12fa-d3f4-468e-bc84-b40357861640%2FresourceGroups%2Fsecondcmg%2Fproviders%2FMicrosoft.Storage%2FstorageAccounts%2Fsecondcmg%22%2C%22resourceType%22%3A%22Microsoft.Storage%2FstorageAccounts%22%2C%22resourceName%22%3A%22secondcmg%22%7D%7D%7D%5D%7D%26nbsp%3B%26nbsp%3B%26nbsp%3B%26nbsp%3B%26nbsp%3B%26nbsp%3B%26nbsp%3B%26nbsp%3BSMS_CLOUD_SERVICES_MANAGER%3C%2FSPAN%3E%3C%2FI%3E%3CSPAN%20style%3D%22font-size%3A%2011.0pt%3B%20font-family%3A%20'Calibri'%2Csans-serif%3B%20mso-bidi-font-family%3A%20Calibri%3B%22%3E%26nbsp%3B%26nbsp%3B%26nbsp%3B%26nbsp%3B%26nbsp%3B%26nbsp%3B%26nbsp%3B%26nbsp%3B%3C%2FSPAN%3E%3C%2FP%3E%0A%3CP%20style%3D%22margin%3A%200in%3B%20margin-bottom%3A%20.0001pt%3B%22%3E%3CSPAN%20style%3D%22font-size%3A%2011.0pt%3B%20font-family%3A%20'Calibri'%2Csans-serif%3B%20mso-bidi-font-family%3A%20Calibri%3B%22%3E%26nbsp%3B%3C%2FSPAN%3E%3C%2FP%3E%0A%3CP%20style%3D%22margin%3A%200in%3B%20margin-bottom%3A%20.0001pt%3B%22%3E%3CSPAN%20style%3D%22font-size%3A%2011.0pt%3B%20font-family%3A%20'Calibri'%2Csans-serif%3B%20mso-bidi-font-family%3A%20Calibri%3B%22%3EMake%20sure%20%3CSTRONG%3EStatus%3C%2FSTRONG%3E%20changes%20to%20Ready%20before%20proceeding%20with%20additional%20changes%20in%20SCCM.%3C%2FSPAN%3E%3C%2FP%3E%0A%3CP%20style%3D%22margin%3A%200in%3B%20margin-bottom%3A%20.0001pt%3B%22%3E%3CSPAN%20style%3D%22font-size%3A%2011.0pt%3B%20font-family%3A%20'Calibri'%2Csans-serif%3B%20mso-bidi-font-family%3A%20Calibri%3B%22%3E%26nbsp%3B%3CSPAN%20class%3D%22lia-inline-image-display-wrapper%20lia-image-align-inline%22%20style%3D%22width%3A%20999px%3B%22%3E%3CIMG%20src%3D%22https%3A%2F%2Fgxcuf89792.i.lithium.com%2Ft5%2Fimage%2Fserverpage%2Fimage-id%2F122342i6AFF8C5760605731%2Fimage-size%2Flarge%3Fv%3D1.0%26amp%3Bpx%3D999%22%20alt%3D%22image089.jpg%22%20title%3D%22image089.jpg%22%20%2F%3E%3C%2FSPAN%3E%3C%2FSPAN%3E%3C%2FP%3E%0A%3CP%20style%3D%22margin%3A%200in%3B%20margin-bottom%3A%20.0001pt%3B%22%3E%3CSPAN%20style%3D%22font-size%3A%2011.0pt%3B%20font-family%3A%20'Calibri'%2Csans-serif%3B%20mso-bidi-font-family%3A%20Calibri%3B%22%3E%26nbsp%3B%3C%2FSPAN%3E%3C%2FP%3E%0A%3CP%20style%3D%22margin%3A%200in%3B%20margin-bottom%3A%20.0001pt%3B%22%3E%3CSTRONG%3E%3CSPAN%20style%3D%22font-size%3A%2014.0pt%3B%20font-family%3A%20'Calibri'%2Csans-serif%3B%20mso-bidi-font-family%3A%20Calibri%3B%22%3E6.%20Additional%20Requirements%20to%20complete%20the%20setup%3C%2FSPAN%3E%3C%2FSTRONG%3E%3C%2FP%3E%0A%3CP%20style%3D%22margin%3A%200in%3B%20margin-bottom%3A%20.0001pt%3B%22%3E%3CSPAN%20style%3D%22font-size%3A%2011.0pt%3B%20font-family%3A%20'Calibri'%2Csans-serif%3B%20mso-bidi-font-family%3A%20Calibri%3B%22%3E%26nbsp%3B%3C%2FSPAN%3E%3C%2FP%3E%0A%3CP%20style%3D%22margin%3A%200in%3B%20margin-bottom%3A%20.0001pt%3B%22%3E%3CSTRONG%3E%3CSPAN%20style%3D%22font-size%3A%2011.0pt%3B%20font-family%3A%20'Calibri'%2Csans-serif%3B%20mso-bidi-font-family%3A%20Calibri%3B%22%3E6.1%3C%2FSPAN%3E%3C%2FSTRONG%3E%3CSPAN%20style%3D%22font-size%3A%2011.0pt%3B%20font-family%3A%20'Calibri'%2Csans-serif%3B%20mso-bidi-font-family%3A%20Calibri%3B%22%3E%20Install%20%3CSTRONG%3ECloud%20management%20gateway%20connection%20point%3C%2FSTRONG%3E%20role%20on%20a%20server%20of%20your%20choice.%20It%20can%20be%20on%20the%20Site%20System%20running%20Management%20Point%20role%20or%20another%20remote%20Site%20System%20without%20MP%20role%20installed.%20Wherever%20you%20install%2C%20make%20sure%20that%20Server%20%3CSPAN%20class%3D%22GramE%22%3Eis%20able%20to%3C%2FSPAN%3E%20communicate%20with%20CMG.%20Refer%20to%20%3C%2FSPAN%3E%3CA%20href%3D%22https%3A%2F%2Fdocs.microsoft.com%2Fen-us%2Fsccm%2Fcore%2Fclients%2Fmanage%2Fcmg%2Fplan-cloud-management-gateway%23required-ports%22%20target%3D%22_blank%22%20rel%3D%22noopener%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%22%3E%3CSPAN%20style%3D%22font-size%3A%2011.0pt%3B%20font-family%3A%20'Calibri'%2Csans-serif%3B%20mso-bidi-font-family%3A%20Calibri%3B%22%3Ehttps%3A%2F%2Fdocs.microsoft.com%2Fen-us%2Fsccm%2Fcore%2Fclients%2Fmanage%2Fcmg%2Fplan-cloud-management-gateway%23required-ports%3C%2FSPAN%3E%3C%2FA%3E%3CSPAN%20style%3D%22font-size%3A%2011.0pt%3B%20font-family%3A%20'Calibri'%2Csans-serif%3B%20mso-bidi-font-family%3A%20Calibri%3B%22%3E%20for%20details.%3C%2FSPAN%3E%3C%2FP%3E%0A%3CP%20style%3D%22margin%3A%200in%3B%20margin-bottom%3A%20.0001pt%3B%22%3E%3CSPAN%20style%3D%22font-size%3A%2011.0pt%3B%20font-family%3A%20'Calibri'%2Csans-serif%3B%20mso-bidi-font-family%3A%20Calibri%3B%22%3E%26nbsp%3B%3C%2FSPAN%3E%3C%2FP%3E%0A%3CP%20style%3D%22margin%3A%200in%3B%20margin-bottom%3A%20.0001pt%3B%22%3E%3CSPAN%20style%3D%22font-size%3A%2011.0pt%3B%20font-family%3A%20'Calibri'%2Csans-serif%3B%20mso-bidi-font-family%3A%20Calibri%3B%22%3E%3CSPAN%20class%3D%22lia-inline-image-display-wrapper%20lia-image-align-inline%22%20style%3D%22width%3A%20638px%3B%22%3E%3CIMG%20src%3D%22https%3A%2F%2Fgxcuf89792.i.lithium.com%2Ft5%2Fimage%2Fserverpage%2Fimage-id%2F122343iC763C78945144217%2Fimage-dimensions%2F638x348%3Fv%3D1.0%22%20width%3D%22638%22%20height%3D%22348%22%20alt%3D%22image091.jpg%22%20title%3D%22image091.jpg%22%20%2F%3E%3C%2FSPAN%3E%3C%2FSPAN%3E%3C%2FP%3E%0A%3CP%20style%3D%22margin%3A%200in%3B%20margin-bottom%3A%20.0001pt%3B%22%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%20style%3D%22margin%3A%200in%3B%20margin-bottom%3A%20.0001pt%3B%22%3E%3CSTRONG%3E%3CSPAN%20style%3D%22font-size%3A%2011.0pt%3B%20font-family%3A%20'Calibri'%2Csans-serif%3B%20mso-bidi-font-family%3A%20Calibri%3B%22%3E6.2%3C%2FSPAN%3E%3C%2FSTRONG%3E%3CSPAN%20style%3D%22font-size%3A%2011.0pt%3B%20font-family%3A%20'Calibri'%2Csans-serif%3B%20mso-bidi-font-family%3A%20Calibri%3B%22%3E%20Enable%20MP%20to%20allow%20CMG%20traffic%20by%20checking%20%22%3CSTRONG%3EAllow%20Configuration%20Manager%20cloud%20management%20gateway%20traffic%3C%2FSTRONG%3E%22%20under%20MP%20properties.%3C%2FSPAN%3E%3C%2FP%3E%0A%3CP%20style%3D%22margin%3A%200in%3B%20margin-bottom%3A%20.0001pt%3B%22%3E%3CSPAN%20style%3D%22font-size%3A%2011.0pt%3B%20font-family%3A%20'Calibri'%2Csans-serif%3B%20mso-bidi-font-family%3A%20Calibri%3B%22%3E%26nbsp%3B%3C%2FSPAN%3E%3C%2FP%3E%0A%3CP%20style%3D%22margin%3A%200in%3B%20margin-bottom%3A%20.0001pt%3B%22%3E%3CSPAN%20style%3D%22font-size%3A%2011.0pt%3B%20font-family%3A%20'Calibri'%2Csans-serif%3B%20mso-bidi-font-family%3A%20Calibri%3B%22%3E%3CSPAN%20class%3D%22lia-inline-image-display-wrapper%20lia-image-align-inline%22%20style%3D%22width%3A%20624px%3B%22%3E%3CIMG%20src%3D%22https%3A%2F%2Fgxcuf89792.i.lithium.com%2Ft5%2Fimage%2Fserverpage%2Fimage-id%2F122344iD9091C5451B1D929%2Fimage-dimensions%2F624x478%3Fv%3D1.0%22%20width%3D%22624%22%20height%3D%22478%22%20alt%3D%22image093.jpg%22%20title%3D%22image093.jpg%22%20%2F%3E%3C%2FSPAN%3E%3C%2FSPAN%3E%3C%2FP%3E%0A%3CP%20style%3D%22margin%3A%200in%3B%20margin-bottom%3A%20.0001pt%3B%22%3E%3CSPAN%20style%3D%22font-size%3A%2011.0pt%3B%20font-family%3A%20'Calibri'%2Csans-serif%3B%20mso-bidi-font-family%3A%20Calibri%3B%22%3E%26nbsp%3B%3C%2FSPAN%3E%3C%2FP%3E%0A%3CP%20class%3D%22MsoNormal%22%3E%3CSPAN%20class%3D%22normaltextrun%22%3E%3CSPAN%20style%3D%22mso-ascii-font-family%3A%20Calibri%3B%20mso-hansi-font-family%3A%20Calibri%3B%20mso-bidi-font-family%3A%20Calibri%3B%20color%3A%20black%3B%20background%3A%20white%3B%22%3EAt%20this%20point%2C%20clients%20will%20get%20to%20know%20about%20CMG%20in%20the%20environment%20if%20they%20are%20communicating%20with%20a%20Management%20Point.%20If%20all%20the%20steps%20were%20followed%20properly%2C%20on%20the%20client%20side%20you%20will%20see%20successful%20retrieval%20of%20AAD%20User%20token.%20Clients%20will%20start%20communicating%20with%20CMG%20when%20the%20connection%20changes%20from%26nbsp%3B%E2%80%9CIntranet%E2%80%9D%26nbsp%3Bto%26nbsp%3B%E2%80%9CInternet%E2%80%9D.%3C%2FSPAN%3E%3C%2FSPAN%3E%3CSPAN%20class%3D%22eop%22%3E%3CSPAN%20style%3D%22mso-ascii-font-family%3A%20Calibri%3B%20mso-hansi-font-family%3A%20Calibri%3B%20mso-bidi-font-family%3A%20Calibri%3B%20color%3A%20black%3B%20background%3A%20white%3B%22%3E%26nbsp%3B%3C%2FSPAN%3E%3C%2FSPAN%3E%3C%2FP%3E%0A%3CP%20class%3D%22MsoNormal%22%3E%3CSPAN%20class%3D%22eop%22%3E%3CSTRONG%3E%3CSPAN%20style%3D%22mso-ascii-font-family%3A%20Calibri%3B%20mso-hansi-font-family%3A%20Calibri%3B%20mso-bidi-font-family%3A%20Calibri%3B%20color%3A%20black%3B%20background%3A%20white%3B%22%3ELogs%20to%20monitor%3C%2FSPAN%3E%3C%2FSTRONG%3E%3C%2FSPAN%3E%3C%2FP%3E%0A%3CP%20class%3D%22MsoNormal%22%3E%3CSPAN%20class%3D%22eop%22%3E%3CI%3E%3CSPAN%20style%3D%22mso-ascii-font-family%3A%20Calibri%3B%20mso-hansi-font-family%3A%20Calibri%3B%20mso-bidi-font-family%3A%20Calibri%3B%20color%3A%20black%3B%20background%3A%20white%3B%22%3ELocationServices.log%3C%2FSPAN%3E%3C%2FI%3E%3C%2FSPAN%3E%3CSPAN%20class%3D%22eop%22%3E%3CSPAN%20style%3D%22mso-ascii-font-family%3A%20Calibri%3B%20mso-hansi-font-family%3A%20Calibri%3B%20mso-bidi-font-family%3A%20Calibri%3B%20color%3A%20black%3B%20background%3A%20white%3B%22%3E%20-%26gt%3B%20Check%20to%20see%20if%20the%20client%20is%20seeing%20CMG.%3C%2FSPAN%3E%3C%2FSPAN%3E%3C%2FP%3E%0A%3CP%20class%3D%22MsoNoSpacing%22%3E%3CSPAN%20class%3D%22eop%22%3E%3CI%3E%3CSPAN%20style%3D%22font-size%3A%2010.0pt%3B%20mso-ascii-font-family%3A%20Calibri%3B%20mso-hansi-font-family%3A%20Calibri%3B%20mso-bidi-font-family%3A%20Calibri%3B%20color%3A%20black%3B%20background%3A%20yellow%3B%20mso-highlight%3A%20yellow%3B%20mso-shading%3A%20white%3B%22%3EInternet%20Management%20Points%20from%20assigned%20MP%3C%2FSPAN%3E%3C%2FI%3E%3C%2FSPAN%3E%3CSPAN%20class%3D%22eop%22%3E%3CI%3E%3CSPAN%20style%3D%22font-size%3A%2010.0pt%3B%20mso-ascii-font-family%3A%20Calibri%3B%20mso-hansi-font-family%3A%20Calibri%3B%20mso-bidi-font-family%3A%20Calibri%3B%20color%3A%20black%3B%20background%3A%20white%3B%22%3E%3A%3CSPAN%20style%3D%22mso-tab-count%3A%201%3B%22%3E%26nbsp%3B%26nbsp%3B%26nbsp%3B%26nbsp%3B%26nbsp%3B%26nbsp%3B%26nbsp%3B%26nbsp%3B%26nbsp%3B%26nbsp%3B%26nbsp%3B%26nbsp%3B%26nbsp%3B%26nbsp%3B%26nbsp%3B%20%3C%2FSPAN%3E%3CSPAN%20class%3D%22SpellE%22%3ELocationServices%3C%2FSPAN%3E%3CSPAN%20style%3D%22mso-tab-count%3A%201%3B%22%3E%26nbsp%3B%20%3C%2FSPAN%3E7%2F1%2F2019%2010%3A50%3A58%20PM%3CSPAN%20style%3D%22mso-tab-count%3A%201%3B%22%3E%26nbsp%3B%26nbsp%3B%26nbsp%3B%26nbsp%3B%26nbsp%3B%26nbsp%3B%20%3C%2FSPAN%3E4168%20(0x1048)%3C%2FSPAN%3E%3C%2FI%3E%3C%2FSPAN%3E%3C%2FP%3E%0A%3CP%20class%3D%22MsoNoSpacing%22%3E%3CSPAN%20class%3D%22eop%22%3E%3CI%3E%3CSPAN%20style%3D%22font-size%3A%2010.0pt%3B%20mso-ascii-font-family%3A%20Calibri%3B%20mso-hansi-font-family%3A%20Calibri%3B%20mso-bidi-font-family%3A%20Calibri%3B%20color%3A%20black%3B%20background%3A%20white%3B%22%3EName%3A%20'SECONDCMG.LABCMG.COM%2F%3CSPAN%20class%3D%22SpellE%22%3ECCM_Proxy_MutualAuth%3C%2FSPAN%3E%2F216172782113783842'%20HTTPS%3A%20'Y'%20%3CSPAN%20class%3D%22SpellE%22%3EForestTrust%3C%2FSPAN%3E%3A%20'N'%2C%20Locality%3A%20'0'%2C%20%3CSPAN%20class%3D%22SpellE%22%3EMPBGRFallbackType%3C%2FSPAN%3E%3A%20'None'%2C%20%3CSPAN%20class%3D%22SpellE%22%3EMPFallbackTime%3C%2FSPAN%3E%3A%20'0'%3CSPAN%20style%3D%22mso-tab-count%3A%201%3B%22%3E%26nbsp%3B%26nbsp%3B%26nbsp%3B%26nbsp%3B%26nbsp%3B%26nbsp%3B%26nbsp%3B%26nbsp%3B%26nbsp%3B%26nbsp%3B%26nbsp%3B%26nbsp%3B%26nbsp%3B%26nbsp%3B%26nbsp%3B%20%3C%2FSPAN%3E%3CSPAN%20class%3D%22SpellE%22%3ELocationServices%3C%2FSPAN%3E%3C%2FSPAN%3E%3C%2FI%3E%3C%2FSPAN%3E%3CSPAN%20class%3D%22eop%22%3E%3CSPAN%20style%3D%22mso-ascii-font-family%3A%20Calibri%3B%20mso-hansi-font-family%3A%20Calibri%3B%20mso-bidi-font-family%3A%20Calibri%3B%20color%3A%20black%3B%20background%3A%20white%3B%22%3E%3CSPAN%20style%3D%22mso-tab-count%3A%201%3B%22%3E%26nbsp%3B%20%3C%2FSPAN%3E%3C%2FSPAN%3E%3C%2FSPAN%3E%3C%2FP%3E%0A%3CP%20class%3D%22MsoNormal%22%3E%3CSPAN%20class%3D%22eop%22%3E%3CSPAN%20style%3D%22mso-ascii-font-family%3A%20Calibri%3B%20mso-hansi-font-family%3A%20Calibri%3B%20mso-bidi-font-family%3A%20Calibri%3B%20color%3A%20black%3B%20background%3A%20white%3B%22%3E%26nbsp%3B%3C%2FSPAN%3E%3C%2FSPAN%3E%3C%2FP%3E%0A%3CP%20class%3D%22MsoNormal%22%3E%3CSPAN%20class%3D%22eop%22%3E%3CI%3E%3CSPAN%20style%3D%22mso-ascii-font-family%3A%20Calibri%3B%20mso-hansi-font-family%3A%20Calibri%3B%20mso-bidi-font-family%3A%20Calibri%3B%20color%3A%20black%3B%20background%3A%20white%3B%22%3EClientlocation.log%3A%20%3C%2FSPAN%3E%3C%2FI%3E%3C%2FSPAN%3E%3CSPAN%20class%3D%22eop%22%3E%3CSPAN%20style%3D%22mso-ascii-font-family%3A%20Calibri%3B%20mso-hansi-font-family%3A%20Calibri%3B%20mso-bidi-font-family%3A%20Calibri%3B%20color%3A%20black%3B%20background%3A%20white%3B%22%3EConnection%20Change%20must%20happen%20from%20Intranet%20to%20Internet%20for%20the%20client%20to%20start%20communicating%20with%20CMG.%3C%2FSPAN%3E%3C%2FSPAN%3E%3CI%3E%3C%2FI%3E%3C%2FP%3E%0A%3CP%20class%3D%22MsoNoSpacing%22%3E%3CSPAN%20class%3D%22eop%22%3E%3CI%3E%3CSPAN%20style%3D%22font-size%3A%2010.0pt%3B%20mso-ascii-font-family%3A%20Calibri%3B%20mso-hansi-font-family%3A%20Calibri%3B%20mso-bidi-font-family%3A%20Calibri%3B%20color%3A%20black%3B%20background%3A%20yellow%3B%20mso-highlight%3A%20yellow%3B%20mso-shading%3A%20white%3B%22%3EClient%20is%20in%20Internet%3C%2FSPAN%3E%3C%2FI%3E%3C%2FSPAN%3E%3CSPAN%20class%3D%22eop%22%3E%3CI%3E%3CSPAN%20style%3D%22font-size%3A%2010.0pt%3B%20mso-ascii-font-family%3A%20Calibri%3B%20mso-hansi-font-family%3A%20Calibri%3B%20mso-bidi-font-family%3A%20Calibri%3B%20color%3A%20black%3B%20background%3A%20white%3B%22%3E%3CSPAN%20style%3D%22mso-tab-count%3A%201%3B%22%3E%26nbsp%3B%26nbsp%3B%26nbsp%3B%26nbsp%3B%26nbsp%3B%26nbsp%3B%26nbsp%3B%26nbsp%3B%26nbsp%3B%26nbsp%3B%26nbsp%3B%26nbsp%3B%26nbsp%3B%20%3C%2FSPAN%3E%3CSPAN%20class%3D%22SpellE%22%3EClientLocation%3C%2FSPAN%3E%3CSPAN%20style%3D%22mso-tab-count%3A%201%3B%22%3E%26nbsp%3B%26nbsp%3B%26nbsp%3B%26nbsp%3B%26nbsp%3B%20%3C%2FSPAN%3E7%2F2%2F2019%209%3A30%3A41%20AM%3CSPAN%20style%3D%22mso-tab-count%3A%201%3B%22%3E%26nbsp%3B%26nbsp%3B%26nbsp%3B%26nbsp%3B%26nbsp%3B%26nbsp%3B%26nbsp%3B%26nbsp%3B%26nbsp%3B%26nbsp%3B%20%3C%2FSPAN%3E4160%20(0x1040)%3C%2FSPAN%3E%3C%2FI%3E%3C%2FSPAN%3E%3C%2FP%3E%0A%3CP%20class%3D%22MsoNoSpacing%22%3E%3CSPAN%20class%3D%22eop%22%3E%3CI%3E%3CSPAN%20style%3D%22font-size%3A%2010.0pt%3B%20mso-ascii-font-family%3A%20Calibri%3B%20mso-hansi-font-family%3A%20Calibri%3B%20mso-bidi-font-family%3A%20Calibri%3B%20color%3A%20black%3B%20background%3A%20white%3B%22%3ECurrent%20internet%20management%20point%20is%20SECONDCMG.LABCMG.COM%2F%3CSPAN%20class%3D%22SpellE%22%3ECCM_Proxy_MutualAuth%3C%2FSPAN%3E%2F216172782113783842%3CSPAN%20style%3D%22mso-tab-count%3A%201%3B%22%3E%26nbsp%3B%26nbsp%3B%26nbsp%3B%26nbsp%3B%26nbsp%3B%26nbsp%3B%26nbsp%3B%26nbsp%3B%26nbsp%3B%26nbsp%3B%26nbsp%3B%26nbsp%3B%26nbsp%3B%26nbsp%3B%26nbsp%3B%20%3C%2FSPAN%3E%3CSPAN%20class%3D%22SpellE%22%3EClientLocation%3C%2FSPAN%3E%3CSPAN%20style%3D%22mso-tab-count%3A%201%3B%22%3E%26nbsp%3B%26nbsp%3B%26nbsp%3B%26nbsp%3B%26nbsp%3B%20%3C%2FSPAN%3E7%2F2%2F2019%209%3A30%3A41%20AM%3CSPAN%20style%3D%22mso-tab-count%3A%201%3B%22%3E%26nbsp%3B%26nbsp%3B%26nbsp%3B%26nbsp%3B%26nbsp%3B%26nbsp%3B%26nbsp%3B%26nbsp%3B%20%3C%2FSPAN%3E4160%20(0x1040)%3C%2FSPAN%3E%3C%2FI%3E%3C%2FSPAN%3E%3C%2FP%3E%0A%3CP%20style%3D%22margin%3A%200in%3B%20margin-bottom%3A%20.0001pt%3B%22%3E%3CSPAN%20class%3D%22eop%22%3E%3CSPAN%20style%3D%22font-size%3A%2011.0pt%3B%20font-family%3A%20'Calibri'%2Csans-serif%3B%20mso-fareast-font-family%3A%20Calibri%3B%20mso-fareast-theme-font%3A%20minor-latin%3B%20mso-bidi-font-family%3A%20Calibri%3B%20color%3A%20black%3B%20background%3A%20white%3B%22%3E%26nbsp%3B%3C%2FSPAN%3E%3C%2FSPAN%3E%3C%2FP%3E%0A%3CP%20style%3D%22margin%3A%200in%3B%20margin-bottom%3A%20.0001pt%3B%22%3E%3CSPAN%20class%3D%22eop%22%3E%3CI%3E%3CSPAN%20style%3D%22font-size%3A%2011.0pt%3B%20font-family%3A%20'Calibri'%2Csans-serif%3B%20mso-fareast-font-family%3A%20Calibri%3B%20mso-fareast-theme-font%3A%20minor-latin%3B%20mso-bidi-font-family%3A%20Calibri%3B%20color%3A%20black%3B%20background%3A%20white%3B%22%3EADALOperationProvider.log%3A%20%3C%2FSPAN%3E%3C%2FI%3E%3C%2FSPAN%3E%3CSPAN%20class%3D%22eop%22%3E%3CSPAN%20style%3D%22font-size%3A%2011.0pt%3B%20font-family%3A%20'Calibri'%2Csans-serif%3B%20mso-fareast-font-family%3A%20Calibri%3B%20mso-fareast-theme-font%3A%20minor-latin%3B%20mso-bidi-font-family%3A%20Calibri%3B%20color%3A%20black%3B%20background%3A%20white%3B%22%3EGood%20to%20log%20to%20confirm%20if%20AAD%20User%20token%20acquisition%20worked.%20Not%20seeing%20an%20error%20after%20%E2%80%9CGetting%20AAD%20(user)%20token)%20entry%20is%20an%20indication%20that%20it%20was%20successful.%3C%2FSPAN%3E%3C%2FSPAN%3E%3C%2FP%3E%0A%3CP%20style%3D%22margin%3A%200in%3B%20margin-bottom%3A%20.0001pt%3B%22%3E%3CSPAN%20style%3D%22font-size%3A%2011.0pt%3B%20font-family%3A%20'Calibri'%2Csans-serif%3B%20mso-bidi-font-family%3A%20Calibri%3B%22%3E%26nbsp%3B%3C%2FSPAN%3E%3C%2FP%3E%0A%3CP%20style%3D%22margin%3A%200in%3B%20margin-bottom%3A%20.0001pt%3B%22%3E%3CSPAN%20style%3D%22font-size%3A%2011.0pt%3B%20font-family%3A%20'Calibri'%2Csans-serif%3B%20mso-bidi-font-family%3A%20Calibri%3B%22%3E%3CSPAN%20class%3D%22lia-inline-image-display-wrapper%20lia-image-align-inline%22%20style%3D%22width%3A%20999px%3B%22%3E%3CIMG%20src%3D%22https%3A%2F%2Fgxcuf89792.i.lithium.com%2Ft5%2Fimage%2Fserverpage%2Fimage-id%2F122345iC46BECF487AF53E2%2Fimage-size%2Flarge%3Fv%3D1.0%26amp%3Bpx%3D999%22%20alt%3D%22image095.jpg%22%20title%3D%22image095.jpg%22%20%2F%3E%3C%2FSPAN%3E%3C%2FSPAN%3E%3C%2FP%3E%0A%3CP%20style%3D%22margin%3A%200in%3B%20margin-bottom%3A%20.0001pt%3B%22%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%20style%3D%22margin%3A%200in%3B%20margin-bottom%3A%20.0001pt%3B%22%3E%3CI%3E%3CSPAN%20style%3D%22font-size%3A%2011.0pt%3B%20font-family%3A%20'Calibri'%2Csans-serif%3B%20mso-bidi-font-family%3A%20Calibri%3B%22%3EConfiguration%20Manager%20Applet%3C%2FSPAN%3E%3C%2FI%3E%3C%2FP%3E%0A%3CP%20style%3D%22margin%3A%200in%3B%20margin-bottom%3A%20.0001pt%3B%22%3E%3CSPAN%20style%3D%22font-size%3A%2011.0pt%3B%20font-family%3A%20'Calibri'%2Csans-serif%3B%20mso-bidi-font-family%3A%20Calibri%3B%22%3E%26nbsp%3B%3CSPAN%20class%3D%22lia-inline-image-display-wrapper%20lia-image-align-inline%22%20style%3D%22width%3A%20399px%3B%22%3E%3CIMG%20src%3D%22https%3A%2F%2Fgxcuf89792.i.lithium.com%2Ft5%2Fimage%2Fserverpage%2Fimage-id%2F122351iA59392A895064B20%2Fimage-size%2Flarge%3Fv%3D1.0%26amp%3Bpx%3D999%22%20alt%3D%22image096.png%22%20title%3D%22image096.png%22%20%2F%3E%3C%2FSPAN%3E%3C%2FSPAN%3E%3C%2FP%3E%0A%3CP%20style%3D%22margin%3A%200in%3B%20margin-bottom%3A%20.0001pt%3B%22%3E%3CSPAN%20style%3D%22font-size%3A%2011.0pt%3B%20font-family%3A%20'Calibri'%2Csans-serif%3B%20mso-bidi-font-family%3A%20Calibri%3B%22%3E%26nbsp%3B%3C%2FSPAN%3E%3C%2FP%3E%0A%3CP%20style%3D%22margin%3A%200in%3B%20margin-bottom%3A%20.0001pt%3B%22%3E%3CSTRONG%3E%3CI%3E%3CSPAN%20style%3D%22font-size%3A%2011.0pt%3B%20font-family%3A%20'Calibri'%2Csans-serif%3B%20mso-bidi-font-family%3A%20Calibri%3B%22%3ENote%3A%3C%2FSPAN%3E%3C%2FI%3E%3C%2FSTRONG%3E%3CI%3E%3CSPAN%20style%3D%22font-size%3A%2011.0pt%3B%20font-family%3A%20'Calibri'%2Csans-serif%3B%20mso-bidi-font-family%3A%20Calibri%3B%22%3E%20Client%20certificate%20is%20Self-signed%20as%20we%20are%20using%20AAD%20User%20token%20instead%20of%20PKI%20Certificate%20for%20Authentication.%20%3C%2FSPAN%3E%3C%2FI%3E%3C%2FP%3E%0A%3CP%20style%3D%22margin%3A%200in%3B%20margin-bottom%3A%20.0001pt%3B%22%3E%3CSPAN%20style%3D%22font-size%3A%2011.0pt%3B%20font-family%3A%20'Calibri'%2Csans-serif%3B%20mso-bidi-font-family%3A%20Calibri%3B%22%3E%26nbsp%3B%3C%2FSPAN%3E%3C%2FP%3E%0A%3CP%20style%3D%22margin%3A%200in%3B%20margin-bottom%3A%20.0001pt%3B%22%3E%3CSPAN%20style%3D%22font-size%3A%2011.0pt%3B%20font-family%3A%20'Calibri'%2Csans-serif%3B%20mso-bidi-font-family%3A%20Calibri%3B%22%3E%26nbsp%3B%3CSPAN%20class%3D%22lia-inline-image-display-wrapper%20lia-image-align-inline%22%20style%3D%22width%3A%20400px%3B%22%3E%3CIMG%20src%3D%22https%3A%2F%2Fgxcuf89792.i.lithium.com%2Ft5%2Fimage%2Fserverpage%2Fimage-id%2F122349iE8295C7D86D4037C%2Fimage-size%2Flarge%3Fv%3D1.0%26amp%3Bpx%3D999%22%20alt%3D%22image097.png%22%20title%3D%22image097.png%22%20%2F%3E%3C%2FSPAN%3E%3C%2FSPAN%3E%3C%2FP%3E%0A%3CP%20style%3D%22margin%3A%200in%3B%20margin-bottom%3A%20.0001pt%3B%22%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%20style%3D%22margin%3A%200in%3B%20margin-bottom%3A%20.0001pt%3B%22%3E%3CSPAN%20style%3D%22font-size%3A%2011.0pt%3B%20font-family%3A%20'Calibri'%2Csans-serif%3B%20mso-bidi-font-family%3A%20Calibri%3B%22%3E%26nbsp%3B%3C%2FSPAN%3E%3C%2FP%3E%0A%3CP%20class%3D%22MsoNormal%22%3E%3CSPAN%20class%3D%22normaltextrun%22%3E%3CSPAN%20style%3D%22mso-ascii-font-family%3A%20Calibri%3B%20mso-hansi-font-family%3A%20Calibri%3B%20mso-bidi-font-family%3A%20Calibri%3B%20color%3A%20black%3B%20background%3A%20white%3B%22%3EThere%20is%26nbsp%3Ba%26nbsp%3Bcertain%26nbsp%3Brequirement%20for%20AAD%20Device%20token%20Authentication%20to%20work%2C%20which%20I%20will%20discuss%20in%20my%20next%20blog%3C%2FSPAN%3E%3C%2FSPAN%3E%3CSPAN%20class%3D%22eop%22%3E%3CSPAN%20style%3D%22mso-ascii-font-family%3A%20Calibri%3B%20mso-hansi-font-family%3A%20Calibri%3B%20mso-bidi-font-family%3A%20Calibri%3B%20color%3A%20black%3B%20background%3A%20white%3B%22%3E.%3C%2FSPAN%3E%3C%2FSPAN%3E%3C%2FP%3E%0A%3CP%20style%3D%22margin%3A%200in%3B%20margin-bottom%3A%20.0001pt%3B%22%3E%3CSPAN%20style%3D%22font-size%3A%2011.0pt%3B%20font-family%3A%20'Calibri'%2Csans-serif%3B%20mso-bidi-font-family%3A%20Calibri%3B%22%3E%26nbsp%3B%3C%2FSPAN%3E%3C%2FP%3E%0A%3CP%20style%3D%22margin%3A%200in%3B%20margin-bottom%3A%20.0001pt%3B%22%3E%3CSPAN%20style%3D%22font-size%3A%2011.0pt%3B%20font-family%3A%20'Calibri'%2Csans-serif%3B%20mso-bidi-font-family%3A%20Calibri%3B%22%3EThank%20you%2C%3C%2FSPAN%3E%3C%2FP%3E%0A%3CP%20style%3D%22margin%3A%200in%3B%20margin-bottom%3A%20.0001pt%3B%22%3E%3CSPAN%20style%3D%22font-size%3A%2011.0pt%3B%20font-family%3A%20'Calibri'%2Csans-serif%3B%20mso-bidi-font-family%3A%20Calibri%3B%22%3E%26nbsp%3B%3C%2FSPAN%3E%3C%2FP%3E%0A%3CP%20style%3D%22margin%3A%200in%3B%20margin-bottom%3A%20.0001pt%3B%22%3E%3CSPAN%20style%3D%22font-size%3A%2011.0pt%3B%20font-family%3A%20'Calibri'%2Csans-serif%3B%20mso-bidi-font-family%3A%20Calibri%3B%22%3ETaj%20Mohammed%3C%2FSPAN%3E%3C%2FP%3E%0A%3C%2FDIV%3E%3C%2FLINGO-BODY%3E%3CLINGO-TEASER%20id%3D%22lingo-teaser-740011%22%20slang%3D%22en-US%22%3E%3CP%3E%3CSPAN%3EHi%2C%20my%20name%20is%20Taj%20Mohammed%2C%20I%20am%20a%20PFE%20working%20in%20the%20US%20primarily%20with%20SCCM.%20As%20a%20result%20of%20a%20recent%20engagement%20I%20thought%20I%20would%20document%20and%20share%20the%20process%20required%20to%20properly%20create%2Fregister%20Applications%20in%20the%20Azure%20Portal.%20Then%20import%20them%20successfully%20in%20SCCM.%26nbsp%3B%3C%2FSPAN%3E%3CSPAN%3E%26nbsp%3B%3C%2FSPAN%3E%3C%2FP%3E%3C%2FLINGO-TEASER%3E%3CLINGO-LABS%20id%3D%22lingo-labs-740011%22%20slang%3D%22en-US%22%3E%3CLINGO-LABEL%3ETajMohammed%3C%2FLINGO-LABEL%3E%3C%2FLINGO-LABS%3E%3CLINGO-SUB%20id%3D%22lingo-sub-742910%22%20slang%3D%22en-US%22%3ERe%3A%20Importing%20Apps%20to%20set%20up%20Cloud%20Management%20Gateway%20(CMG)%20for%20Configuration%20Manager%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-742910%22%20slang%3D%22en-US%22%3E%3CP%3ENice%20summary%2C%20thx.%20Ony%20EA%20OR%20Pay-as-you-go%20subscriptions%20are%20supported.%20What%20is%20the%20reason%20for%20not%20supporting%20CSP%20subscriptions%3F%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-742944%22%20slang%3D%22en-US%22%3ERe%3A%20Importing%20Apps%20to%20set%20up%20Cloud%20Management%20Gateway%20(CMG)%20for%20Configuration%20Manager%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-742944%22%20slang%3D%22en-US%22%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Fdocs.microsoft.com%2Fen-us%2Fsccm%2Fcore%2Fclients%2Fmanage%2Fcmg%2Fplan-cloud-management-gateway%22%20target%3D%22_blank%22%20rel%3D%22noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%22%3Ehttps%3A%2F%2Fdocs.microsoft.com%2Fen-us%2Fsccm%2Fcore%2Fclients%2Fmanage%2Fcmg%2Fplan-cloud-management-gateway%3C%2FA%3E%3C%2FP%3E%0A%3CP%3E%3CSPAN%20style%3D%22color%3A%20%23000000%3B%20font-family%3A%20'Segoe%20UI'%2C%20SegoeUI%2C%20'Segoe%20WP'%2C%20'Helvetica%20Neue'%2C%20Helvetica%2C%20Tahoma%2C%20Arial%2C%20sans-serif%3B%20font-size%3A%2016px%3B%20font-style%3A%20normal%3B%20font-variant-ligatures%3A%20normal%3B%20font-variant-caps%3A%20normal%3B%20font-weight%3A%20400%3B%20letter-spacing%3A%20normal%3B%20orphans%3A%202%3B%20text-align%3A%20start%3B%20text-indent%3A%200px%3B%20text-transform%3A%20none%3B%20white-space%3A%20normal%3B%20widows%3A%202%3B%20word-spacing%3A%200px%3B%20-webkit-text-stroke-width%3A%200px%3B%20background-color%3A%20%23e2daf1%3B%20text-decoration-style%3A%20initial%3B%20text-decoration-color%3A%20initial%3B%20display%3A%20inline%20!important%3B%20float%3A%20none%3B%22%3EThis%20capability%20doesn't%20enable%20support%20for%20Azure%20Cloud%20Service%20Providers%20(CSP).%20The%20CMG%20deployment%20with%20Azure%20Resource%20Manager%20continues%20to%20use%20the%20classic%20cloud%20service%2C%20which%20the%20CSP%20doesn't%20support.%3C%2FSPAN%3E%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-749145%22%20slang%3D%22en-US%22%3ERe%3A%20Importing%20Apps%20to%20set%20up%20Cloud%20Management%20Gateway%20(CMG)%20for%20Configuration%20Manager%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-749145%22%20slang%3D%22en-US%22%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F371645%22%20target%3D%22_blank%22%3E%40TajMohammed%3C%2FA%3E%26nbsp%3BBrilliant%20article.%20the%20final%20piece%20in%20the%20jigsaw.%3C%2FP%3E%3C%2FLINGO-BODY%3E
Microsoft

Hi, my name is Taj Mohammed, I am a PFE working in the US primarily with SCCM. As a result of a recent engagement I thought I would document and share the process required to properly create/register Applications in the Azure Portal. Then import them successfully in SCCM.  

 

Background

 

SCCM requires someone with Global Admin privileges to Sign In from SCCM Console to automatically register Web/Server and Client/Native Apps with appropriate permissions to onboard AAD. This is a pre-requisite for an ARM based setup of CMG. Although, using Global Admin privileges to Sign In is an easy and quick way to register the Apps quite often SCCM admins have limited access to their AAD tenants. To achieve application registration SCCM also provides an import option without the need for Global Admin Access.

 

Note: All the steps in Azure Portal need to be performed by a Global Admin. SCCM Steps will be performed by SCCM admin except step 5.1 where someone with Owner role or a Co-administrator assigned need to Sign in to see the Subscription.

 

The blog consists of 5 major sections as detailed below.

 

1. Note tenant details

2. Registering Server/Web App

3. Registering Client/Native App

4. Importing Server/Web and Client/Native Apps

5. Installing CMG

6. Additional Requirements to complete the setup

 

We will be using the new and improved App registrations node to register the Apps as App registrations (Legacy) will be gone anytime soon.

 

image001.png

 

Common errors:

 

Errors displayed when the Sign In User account is not a Global Admin.

 

Error: "Failed to Sign in to Azure"

Cause: Account used to Sign-In is not a Global Admin. The App still gets created without proper configuration in Azure.

 

image003.png

 

Error: "Another object with the same value for property identifierUris already exists. For more details you can refer to the AdminUILog"

Cause: This usually happens if you are attempting to Sign-in again after getting the above ("Failed to Sign in to Azure") error. This is really saying App already exists in Azure.

 

image005.png

 

Delete the App from Azure Portal and try again using an account with Global Admin rights.

 

image007.png

 

 If Signing-in as a Global Admin is not an option and you want to use the Import method, follow the below steps.

 

1. Note tenant details

 

1.1 Before we begin, let's make a note of Azure AD Tenant Name and Tenant ID.

AAD Tenant Name: sccmcmg1902outlook.onmicrosoft.com (Trial account used for this demo)

 

image009.png

 

1.2 Get Tenant ID. Azure Active Directory -> Properties -> Directory ID (Tenant ID)

Azure AD Tenant ID: 0fdb7ba4-ebc5-4373-8979-0f01bea6a90f

 

 image011.png

 

 

2. Registering Server/Web App

 

2.1 New Registration: Azure Active Directory -> App registrations -> Click on New registration to create a new App.

 

image013.png

 

 

2.2 Fill in the App Name.

 

Name: There is no guideline to use a specific name. Using CMG-ServerApp.

Supported account types: Leave it to default "Accounts in this organizational directory only (Default Directory)".

Redirect URI: Leave it blank.

Click on Register to create the App.

 

 image015.png

 

2.3 Make a note of newly registered App Name and App ID as we would need this information when we import it later in SCCM.

 

App Name: CMG-ServerApp

Application (client) ID: 5df94352-894e-4ee6-9219-df787ba6e578

 

image017.png 

2.4 Authentication: Go to newly registered App properties. Under Authentication, we will leave all the settings to default except checking the ID tokens box at the bottom.

 

Tip: If you are new to Azure Portal, it is easy to get lost so always look at the path at the top as shown with an arrow to confirm where you are in the Portal.

 

image019.png

 

2.5 Certificates and secrets: Click on New client secret. Any description can be used for the secret. Expiry has to be 1 or 2 years. "Never" is not supported with SCCM.

 image021.png

2.6 Once you click Add, immediately make a note of Secret String Value and expiry date. If you move away from this screen, you won't be able to retrieve the same Secret again and you may have to generate a new Secret. We will be using this Secret String when importing the App.

Expires (Secret Key Expiry): 6/29/2020

Value (Secret Key):

 

image023.png 

 

2.7 API Permissions: Modify Default Microsoft Graph API Permissions from User.Read to Directory.Read.All.

Click on Microsoft Graph (1) to enumerate list of API permissions. Select Application permissions and under Directory, select Directory.Read.All as shown and deselect User.Read under User.

 

image025.png 

 

 

2.8  To successfully apply the permissions, click on Grant admin consent for Default Directory. Example below of the modified permissions.

 image027.png

Note: If these permissions are not granted correctly, AAD User Discovery will not work in SCCM.

 

2.9 Expose an API: We will be setting Application ID URI and going to Add a scope here.

 

image029.png

 

There is no specific guideline related to what name must be used here. App ID URI just needs to be unique within the tenant and we will be using this when importing the App. Make a note of App ID URI.

 

image031.png

 

Scope name: user_impersonation

Who can consent?: Admins and users

Have some meaningful text under the remaining mandatory fields. Once done, click on Add scope to create the scope.

 

image033.png 

 

Once created, this is how Expose an API page would look like.

 image035.png

App ID URI in this case is https://CMGConfigMgrService.

 

This completes Server/Web App registrations steps.

 

3. Registering Client/Native App

 

3.1 Just as we registered Server App, go to App registrations ->  New registration to register a new Client/Native App.

 

image037.png

 

image039.png

 

 

3.2 Make a note of newly created Client App's Application ID from here as we need it in our next step.

 

image041.png

 

Application ID (Client ID:( 1a9e80cb-bda2-46e7-8dfb-d72c9e5c61e4

Display name (Application Name:( CMG-ClientApp

 

3.3 Authentication: This is an important step. We are going to add a REDIRECT URI here using the following syntax.

ms-appx-web://Microsoft.AAD.BrokerPlugin/Client App's Application ID

ms-appx-web://Microsoft.AAD.BrokerPlugin/1a9e80cb-bda2-46e7-8dfb-d72c9e5c61e4 (This will be the REDIRECT URI. Copy the exact string with your Client Application ID)

Change the Type to Public client (mobile & desktops) and check ID tokens option under "Implicit grant". After making these changes, click Save.

 

image043.png

 

 

3.4 API permissions: Remove the default Microsoft Graph User.Read permission shown in the screen below. To remove, uncheck User.Read.

 

image045.png

 

 

3.5 Click on Add a permission and select Azure Active Directory Graph from the list of Microsoft APIs.

 

 image047.png

 

When prompted with:

What type of permissions does your application require?

Select Delegated Permissions.

Under the list of permissions, select Directory and then Directory.Read.All. When done, click on Add permissions.

 

 image049.png

 

 

We need to add one more permission here. Adding access to Server/Web App we created earlier. Click on Add a permission again, select My APIs and select CMG-ServerApp we created earlier.

 

image051.png

 

Make sure user_impersonation is selected and click Add permissions to save the permissions.

 

 image053.png

 

To complete the permission assignment, grant consent by clicking on Grant admin context for Default Directory.

 

image055.png 

 

Note: This completes all the needed changes in Azure Portal. Role of Global Admin ends here.

 

4. Importing Server/Web and Client/Native Apps

 

4.1 Importing Server/Web App

 

Perform these steps at the top of the hierarchy, CAS or Primary (if there is no CAS) server using an SCCM Admin account.

Open SCCM Console - > Administration -> Azure Services -> Configure Azure Services.

Name: No specific requirement. Use any meaningful name.

 

 image057.png

 

4.2 Click on Browse button next to Web app. Create option will be selected if you have Global Admin permissions to create the Apps automatically in Azure. We will be selecting import option as we are going to import the Apps created above.

 

image059.png

 

 

To import Server/Web App, use the values obtained from previous steps and enter into the corresponding boxes shown below. 

 image061.png

 

If the values are accurate, you will get Successfully verified message when you click on Verify as you see below.

 

Click OK to proceed.

 image063.png

 

Select the imported Server App and Click OK to continue.

image065.png 

 

 

4.3 Importing Client/Native App

 

Values needed to import Client/Native App can be obtained from Step 3.2 above.

 

image067.png

 

Click OK.

 image069.jpg

 

Select the imported App and Click OK.

 

 image071.jpg

 

On this screen, AAD User Discovery can be enabled. This is required if you want AAD User Token Authentication to work. Click Next to complete the wizard. If the clients are going to use PKI Certificates, this won't be required.

 

image073.jpg  

Click Next to complete the wizard. At this stage, AAD User Discovery should run and you can monitor SMS_AZURE_DISCOVERY_AGENT.LOG for details.

 

If you see the following error, you may have not granted permissions to Server/Web App correctly as show in Step 2.7.

 

ERROR: Error occurred. StatusCode = Forbidden, reason = Forbidden        SMS_AZUREAD_DISCOVERY_AGENT

ERROR: Sync request failed. Exception: System.Net.WebException: Forbidden: Forbidden~~   at Microsoft.ConfigurationManager.AzureADDiscovery.AzureADQueryClient.GetAzureADQueryResult(String graphRequest)~~   at Microsoft.ConfigurationManager.AzureADDiscovery.AzureADSyncManager.Sync(Boolean runFullSync) ~~ Retrying after 30 seconds...        SMS_AZUREAD_DISCOVERY_AGENT        

 

5. Installing CMG

 

5.1 Run Create Cloud Management Gateway wizard

 

Administration-> Cloud Services -> Cloud Management Gateway -> Create Cloud Management Gateway

 

image075.jpg

 

After signing in with AAD credentials, if you are not seeing Subscription ID as shown in screen below, it means the account used doesn't have proper access at Subscription level.

 image077.jpg

 

The user credentials used to sign in here must either be of a Co-Administrator or Subscription Owner to see the Subscription populated in the Wizard.

 image079.jpg

 

OR

 

image081.jpg

 

5.2 Complete the remaining steps to complete the creation of Cloud Management Gateway.

Certificate file: You need a .PFX (Cert with Private key exported). Look at this link for details https://docs.microsoft.com/en-us/sccm/core/clients/manage/cmg/certificates-for-cloud-management-gate...

Note: Select the remaining options depending on your requirements. If public CA Cert is used for CMG and Clients are going to use AAD Token Auth, you don't need to specify and upload any additional root/intermediate certificates.

In case you use Internal CA Cert for CMG or for Client Authentication, you may have to upload respective Root and Intermediate certificates.

 

image083.jpg

 

Configure Alerts in the next screen and complete the Wizard.

 

Common Installation errors:

 

You should monitor CMG status in the console and make sure it is in "Ready" state

image085.jpg

 

If the status is in error Status, look at Program Files\Microsoft Configuration Manager\Logs\Cloudmgr.log for details.

 

ERROR: Exception occured for service secondcmg : Hyak.Common.CloudException: AuthorizationFailed: The client '27bbb19d-e564-4a7c-bd35-5c10db79ca6d' with object id '27bbb19d-e564-4a7c-bd35-5c10db79ca6d' does not have authorization to perform action 'Microsoft.ClassicCompute/domainNames/slots/read' over scope '/subscriptions/a43a12fa-d3f4-468e-bc84-b40357861640/resourcegroups/secondcmg/providers/Microsoft.ClassicCompute/domainNames/secondcmg/slots/Production'.~~   at Microsoft.Runtime.CompilerServices.TaskAwaiter.ThrowForNonSuccess(Task task)~~   at Microsoft.Runtime.CompilerServices.TaskAwaiter.HandleNonSuccess(Task task)~~   at Microsoft.Azure.Management.Resources.ResourceOperationsExtensions.CheckExistence(IResourceOperations operations, String resourceGroupName, ResourceIdentity identity)~~   at Microsoft.ConfigurationManager.AzureManagement.ResourceManager.CloudServiceDeploymentSlotExists(String resourceGroupName, String cloudServiceName, String deploymentSlot)~~   at Microsoft.ConfigurationManager.CloudServicesManager.CreateDeploymentTask.Start(Object taskState).        SMS_CLOUD_SERVICES_MANAGER        

 

To fix the above error, go to All Services -> Subscriptions -> Select the appropriate Subscription -> Resource Providers -> Microsoft.ClassCompute <- Register

 

image087.jpg

 

Similarly, you may get an error for Microsoft.Storage provider if it is not registered. Go ahead and register Microsoft.Storage as we registered Microsoft.ClassicCompute above.

 

ERROR: Resource Manager - Deployment operation details: {"value":[{"id":"/subscriptions/a43a12fa-d3f4-468e-bc84-b40357861640/resourceGroups/secondcmg/providers/Microsoft.Resources/deployments/CreateStorageServicef776f7ca-13a0-4048-8c41-5249b20ae97b/operations/1793C29ACC9770E1","operationId":"1793C29ACC9770E1","properties":{"provisioningOperation":"Create","provisioningState":"Failed","timestamp":"2019-06-30T23:28:00.1224348Z","duration":"PT6.7336014S","trackingId":"901c9599-3491-407c-9921-40ef495864d5","statusCode":"Conflict","statusMessage":{"error":{"code":"MissingSubscriptionRegistration","message":"The subscription is not registered to use namespace 'Microsoft.Storage'. See https://aka.ms/rps-not-found for how to register subscriptions.","details":[{"code":"MissingSubscriptionRegistration","target":"Microsoft.Storage","message":"The subscription is not registered to use namespace 'Microsoft.Storage'. See https://aka.ms/rps-not-found for how to register subscriptions."}]}},"targetResource":{"id":"/subscriptions/a43a12fa-d3f4-468e-bc84-b40357861640/resourceGroups/secondcmg/providers/Microsoft.Storage/storageAccounts/secondcmg","resourceType":"Microsoft.Storage/storageAccounts","resourceName":"secondcmg"}}}]}        SMS_CLOUD_SERVICES_MANAGER        

 

Make sure Status changes to Ready before proceeding with additional changes in SCCM.

 image089.jpg

 

6. Additional Requirements to complete the setup

 

6.1 Install Cloud management gateway connection point role on a server of your choice. It can be on the Site System running Management Point role or another remote Site System without MP role installed. Wherever you install, make sure that Server is able to communicate with CMG. Refer to https://docs.microsoft.com/en-us/sccm/core/clients/manage/cmg/plan-cloud-management-gateway#required... for details.

 

image091.jpg

 

6.2 Enable MP to allow CMG traffic by checking "Allow Configuration Manager cloud management gateway traffic" under MP properties.

 

image093.jpg

 

At this point, clients will get to know about CMG in the environment if they are communicating with a Management Point. If all the steps were followed properly, on the client side you will see successful retrieval of AAD User token. Clients will start communicating with CMG when the connection changes from “Intranet” to “Internet”. 

Logs to monitor

LocationServices.log -> Check to see if the client is seeing CMG.

Internet Management Points from assigned MP:                LocationServices  7/1/2019 10:50:58 PM       4168 (0x1048)

Name: 'SECONDCMG.LABCMG.COM/CCM_Proxy_MutualAuth/216172782113783842' HTTPS: 'Y' ForestTrust: 'N', Locality: '0', MPBGRFallbackType: 'None', MPFallbackTime: '0'                LocationServices 

 

Clientlocation.log: Connection Change must happen from Intranet to Internet for the client to start communicating with CMG.

Client is in Internet              ClientLocation      7/2/2019 9:30:41 AM           4160 (0x1040)

Current internet management point is SECONDCMG.LABCMG.COM/CCM_Proxy_MutualAuth/216172782113783842                ClientLocation      7/2/2019 9:30:41 AM         4160 (0x1040)

 

ADALOperationProvider.log: Good to log to confirm if AAD User token acquisition worked. Not seeing an error after “Getting AAD (user) token) entry is an indication that it was successful.

 

image095.jpg

 

Configuration Manager Applet

 image096.png

 

Note: Client certificate is Self-signed as we are using AAD User token instead of PKI Certificate for Authentication.

 

 image097.png

 

 

There is a certain requirement for AAD Device token Authentication to work, which I will discuss in my next blog.

 

Thank you,

 

Taj Mohammed

3 Comments
New Contributor

Nice summary, thx. Ony EA OR Pay-as-you-go subscriptions are supported. What is the reason for not supporting CSP subscriptions?

Microsoft

https://docs.microsoft.com/en-us/sccm/core/clients/manage/cmg/plan-cloud-management-gateway

This capability doesn't enable support for Azure Cloud Service Providers (CSP). The CMG deployment with Azure Resource Manager continues to use the classic cloud service, which the CSP doesn't support.

Occasional Contributor

@TajMohammed Brilliant article. the final piece in the jigsaw.