# Azure AD App Registration

Review the app-registration components recorded for PaperCut's Entra integration: redirect URL, client credentials, permissions and school-specific registration.

!!!warning Source-derived reference
These notes were recovered from OneNote. Configuration, permissions and operating results have not been freshly verified. Confirm the applicable authority and environment before acting.
!!!

Integration with Azure AD requires an App Registration. Configuration of the App Registration was done using the Papercut provided instructions.

[Synchronize user and group details with standard Azure AD \| PaperCut](https://www.papercut.com/help/manuals/ng-mf/common/sys-user-group-sync-azure-standard-azure).

## App Registration

Each College requires its own App Registration for Papercut.

[Screenshot retained for review](../../review/Review-status.md#asset-bb1756355da339d7b507)

## Authentication

Authentication simply requires a redirect URL as specified in the papercut documentation.

https://\<PCServer FQDN\>:9192/api/oauth2callback

## Certificates & Secrets

A Client ID and Secret is used to allow the papercut application to access AzureAD.

[Screenshot retained for review](../../review/Review-status.md#asset-5787f607d08f18524d02)

The secret expires according to the date specified when being created. At or before expiry a New client secret must be created, and the resulting Client ID and Secret updated in papercut.

## Application Permissions

Papercut also requires specific Application Permissions in Azure to allow Papercut to read user and group information.

[Screenshot retained for review](../../review/Review-status.md#asset-dc4f0591dd2df45ecdfa)

Be sure to Grant admin consent for Christian Community Ministries.

## Other Configuration

The above App Registration automatically creates a new Enterprise App. Within this Enterprise App there are several additional settings that can be applied.

[Screenshot retained for review](../../review/Review-status.md#asset-1779d2f08db494290090)

## Turn On Assignment Required

[Screenshot retained for review](../../review/Review-status.md#asset-66480ff37ca7e9a1705d)

## Assign User Groups

Add user groups who require log on to papercut services.

[Screenshot retained for review](../../review/Review-status.md#asset-f2a984a7dc6355c81566)

## Related guidance

- [Topic overview](Introduction.md)
- [Source review status](../../review/Review-status.md)