← Back

IT setup guide

Share this page with whoever manages Microsoft Entra. Everything the portal needs is one app registration plus read-only directory permissions.

  1. 1 · Register the application in Microsoft Entra

    In the Entra admin centre, create an App registration named “Exit Clearance Portal”. Note the Directory (tenant) ID and Application (client) ID.

  2. 2 · Add the sign-in redirect URI

    Add a Web redirect URI for this portal's domain. Employees, managers and department owners then sign in with their normal corporate account — no new passwords.

  3. 3 · Grant Graph permissions for directory sync

    Add the application permissions User.Read.All and Directory.Read.All, then grant admin consent. These let the portal read employee code, department, designation and reporting manager.

  4. 4 · Create a client secret

    Create a client secret and share the value with your portal administrator. It is stored encrypted and is never shown in the app again.

  5. 5 · Run the first sync

    An administrator enters the tenant ID, client ID and secret on the Administration page, then runs the directory sync. HR can initiate exits immediately afterwards.