{formatDescription(description)}
} {visibleProps.map(([name, prop]) => { const isRequired = requiredProps.includes(name); const hasDefault = prop.default !== undefined; const rawDefault = prop.default; const isComplexDefault = hasDefault && (typeof rawDefault === "object" || typeof rawDefault === "string" && (rawDefault.length > 20 || rawDefault.includes('"'))); const fieldProps = { key: name, body: prop.title || name, type: prop.type, ...prop.title && ({ post: [<>API property: {name}] }), ...isRequired && ({ required: true }), ...!isComplexDefault && hasDefault ? { default: sanitize(String(rawDefault)) } : {} }; const isObject = prop.type === "object" && prop.properties; const isArrayOfObjects = prop.type === "array" && prop.items?.type === "object" && prop.items.properties; return{formatDescription(prop.description)}
} {isComplexDefault &&Default:
{JSON.stringify(rawDefault, null, 2)}
Object attributes:
{'{\n'}
{Object.entries(prop.items.properties).map(([iname, iprop]) => <>
{` ${iname}`}
{prop.items?.required?.includes(iname) && required}
{`: {\n display name: ${sanitize(iprop.title || '')}\n type: ${iprop.type}\n }\n`}
)}
{'}'}
3. Click **New registration**.
The new application registration screen will appear:
4. Enter a name for the application.
5. Choose the *Single Tenant* supported account type.
6. Leave the *Redirect URI* value blank.
7. Click **Register**.
The screen that follows displays the values for:
* **Azure AD Tentant ID.** Listed as "Directory (tenant) ID"
* **Azure AD Client ID.** Listed as "Application (client) ID"
Enter these values in the Fusion UI’s connector configuration.
### Configure your application permissions
1. Click **View API permissions**.
2. Add the following as *Application permissions* under **Microsoft Graph**.
### Find your Client Secret
1. Click **Clients & Secrets**.
2. Create a **New client secret**.
This value is used as the **Azure AD Client Secret** in the Fusion UI’s connector configuration.
## Troubleshooting
Use the following script to diagnose Azure credentials issues:
```java theme={"dark"}
param (
[Parameter(Mandatory)]$AzureTenantId,
[Parameter(Mandatory)]$AzureClientId,
[Parameter(Mandatory)]$AzureClientSecret
)
# first we get the bearer token
$headers = New-Object "System.Collections.Generic.Dictionary[[String],[String]]"
$headers.Add("Content-Type", "application/x-www-form-urlencoded")
$body = "client_id=${AzureClientId}&client_secret=${AzureClientSecret}&scope=https%3A%2F%2Fgraph.microsoft.com%2F.default&grant_type=client_credentials"
$response = Invoke-RestMethod "https://login.microsoftonline.com/${AzureTenantId}/oauth2/v2.0/token" -Method 'POST' -Headers $headers -Body $body
$access_token = $response.access_token
Write-Host "Successfully got access token ${access_token}"
# now that we got the token, use it to get the groups
$headers2 = New-Object "System.Collections.Generic.Dictionary[[String],[String]]"
$headers2.Add("Authorization", "Bearer ${access_token}")
$response2 = Invoke-RestMethod 'https://graph.microsoft.com/v1.0/groups' -Method 'GET' -Headers $headers2
$response2 | ConvertTo-Json
```