Adding an Azure Directory Service Connection

Before you begin

You must have a Microsoft Azure account set up before configuring connection settings in SOTI MobiControl. You must also have authenticated SOTI MobiControl with that account. See Microsoft Azure documentation for more information.

Important: You require a P1 or higher Microsoft Entra ID account to assign groups to Microsoft Enterprise Applications in Microsoft Entra ID.

You require a P1 or higher Microsoft Entra ID account to assign groups to Microsoft Enterprise Applications in Microsoft Entra ID.

You require the following information during the SOTI MobiControl Azure directory service connection setup:

Federation Metadata Document URL
Microsoft Graph API endpoint (domain name only). The SOTI MobiControl default iss graph.microsoft.com.
Client ID of the application
Client Key of the application

About this task

To add an Azure directory service connection to SOTI MobiControl:

Procedure

From the main menu, do one of the following:
- Select Global Settings > Services > Directory to display the Directory dialog box (see Directory).
- Select Global Settings > Console Settings > Authentication Options to display the Authentication Options page (see Authentication Options).
  Under Authentication Type, select MobiControl.
  Select MobiControl Directories.
  Select Manage Directories to open the Directory dialog box (see Directory).
In the Azure Directories dialog box, select the icon.

Fill the fields with the appropriate values, starting with the Connection Details section:


Name	Enter the name of the new connection.
Microsoft Graph API Address	Enter the service root for the Microsoft Graph API request. The default address is https://graph.microsoft.com.
Azure Tenant ID	Select the icon to display the Azure Tenant pane, where you configure new tenants.
Azure Application	The MDM associated with the Tenant ID.

Select Save.

Results

You can now enroll your devices using Azure.