Before you begin
Use an account with permission to create and configure application registrations in your Microsoft Entra ID tenant.
Arrange for an appropriately privileged administrator to grant tenant-wide consent for the required Microsoft Graph permissions.
Confirm your organization’s approved method for securely transmitting a client secret to Northwoods.
Confirm your organization's method for storing client secret expiration information for future reference.
Complete any internal security review required by your organization before granting directory permissions.
Register the Traverse application for New Installations
Sign in to the Microsoft Entra admin center.
Select Microsoft Entra ID, select App registrations, and then select New registration.
On the Register an application page, enter the following information:
Name: Enter a descriptive name, such as NorthwoodsTraverseSingleSignOn.
Supported account types: Single tenant only - <domain>
Redirect URI: Under select platform option select Web and enter
Click Register.
The new application overview page will open, click API permissions, then click the Add a permission option and select Microsoft Graph, then select Delegated permissions and specify the following Configured permissions:
User.Read - required to read the user's profile on authentication and fetch required metadata such as first name, last name, and email address.
Directory.Read.All - required to read directory data.
Click the Add permission button
Click Grant admin consent for <domain> and select Yes.
Go to the Authentication page.
In the Web->Redirect URI configuration section add:
You will now have 2 web URIs listed.
Next, provide Northwoods the necessary information be navigating to the following areas:
Go to the Overview page for the application and copy the:
Application (client) ID - you will provide this to Northwoods at a later step
Go to the Certificates and Secrets page and record the value for the Client Secret and Expiration Date.
Document the Secret Expiration Date in an internal system to be reminded when the secret expires and will need renewed.
Provide the following information to Northwoods using a secure communications channel.
Application (client) ID value
Client Secret value
Expiration Date value
Important: If you do not have a secure communications channel established please contact the Northwoods Support Center using the Customer Portal or 833-323-2637. Do NOT send the information through unencrypted email.
After Northwoods receives that information we will update the Traverse settings and follow up with your organization to test authentication.