Merge

Step 1: Create web application and enable OAuth

In your <a href="https://portal.azure.com/#home" rel="nofollow noopener noreferrer" target="_blank">Active Azure Directory</a> portal, navigate to App Registration

Register a new application for your Azure Entra ID Account, see below for examples

1. Name: any name of your choosing
2. Supported account types: options 2 or 3 are both valid
 1. Accounts in any organizational directory
 2. Accounts in any organizational directory and personal Microsoft accounts
3. Redirect URI: Web 
4. Redirect URI: <a href="https://app.merge.dev/oauth/callback" rel="nofollow noopener noreferrer" target="_blank">https://app.merge.dev/oauth/callback</a>

1. In your <a href="https://portal.azure.com/#home" rel="nofollow noopener noreferrer" target="_blank">Active Azure Directory</a> portal, navigate to App Registration
2. 
3. Register a new application for your Azure Entra ID Account, see below for examples
 1. Name: any name of your choosing
 2. Supported account types: options 2 or 3 are both valid
 1. Accounts in any organizational directory
 2. Accounts in any organizational directory and personal Microsoft accounts
 3. Redirect URI: Web 
 4. Redirect URI: <a href="https://app.merge.dev/oauth/callback" rel="nofollow noopener noreferrer" target="_blank">https://app.merge.dev/oauth/callback</a>
4. When you're done, click register!
5.

Step 2: Saving web application values in Merge

Clicking register will take you to a new page with important info to update and save

If you have already set up your app registration you can navigate to this page via Azure Services -&gt; App Registration

Paste the information below into your <a href="https://app.merge.dev/integrations/hris" rel="nofollow noopener noreferrer" target="_blank">Microsoft Entra ID Integration Settings.</a>

1. The Application Id above is your Client Id
2. The Client Credentials link should show 1 secret, this is your Client Secret
3. Object Id
4. Tenant (Directory) Id
5. Redirect Uri: <a href="https://app.merge.dev/oauth/callback" rel="nofollow noopener noreferrer" target="_blank">https://app.merge.dev/oauth/callback</a>

1. Clicking register will take you to a new page with important info to update and save
2. If you have already set up your app registration you can navigate to this page via Azure Services -&gt; App Registration
 
 
3. Paste the information below into your <a href="https://app.merge.dev/integrations/hris" rel="nofollow noopener noreferrer" target="_blank">Microsoft Entra ID Integration Settings.</a> 
 1. The Application Id above is your Client Id
 2. The Client Credentials link should show 1 secret, this is your Client Secret
 3. Object Id
 4. Tenant (Directory) Id
 5. Redirect Uri: <a href="https://app.merge.dev/oauth/callback" rel="nofollow noopener noreferrer" target="_blank">https://app.merge.dev/oauth/callback</a>

Step 3: Auto refreshing Entra credentials

To do this step you must be an application owner or admin.

Navigate back to Entra and in the App Registration page, click on API Permissions

Then enable Application.ReadWrite.All and Directory.ReadWrite.All.

1. Navigate back to Entra and in the App Registration page, click on API Permissions
2. Then enable Application.ReadWrite.All and Directory.ReadWrite.All.

Note: Merge will refresh your credentials automatically before it expires - the default expiration is 180 days from creation. This will prevent your Linked Accounts from disconnecting due to a expired client secret. The new description for the refreshed client secret will "Merge OAuth App Password" + &lt;timestamp of creation date&gt;.