Azure AD App Registration
Review the app-registration components recorded for PaperCut's Entra integration: redirect URL, client credentials, permissions and school-specific registration.
Source-derived reference
These notes were recovered from OneNote. Configuration, permissions and operating results have not been freshly verified. Confirm the applicable authority and environment before acting.
Integration with Azure AD requires an App Registration. Configuration of the App Registration was done using the Papercut provided instructions.
Synchronize user and group details with standard Azure AD | PaperCut.
App Registration
Each College requires its own App Registration for Papercut.
Screenshot retained for review
Authentication
Authentication simply requires a redirect URL as specified in the papercut documentation.
https://<PCServer FQDN>:9192/api/oauth2callback
Certificates & Secrets
A Client ID and Secret is used to allow the papercut application to access AzureAD.
Screenshot retained for review
The secret expires according to the date specified when being created. At or before expiry a New client secret must be created, and the resulting Client ID and Secret updated in papercut.
Application Permissions
Papercut also requires specific Application Permissions in Azure to allow Papercut to read user and group information.
Screenshot retained for review
Be sure to Grant admin consent for Christian Community Ministries.
Other Configuration
The above App Registration automatically creates a new Enterprise App. Within this Enterprise App there are several additional settings that can be applied.
Screenshot retained for review
Turn On Assignment Required
Screenshot retained for review
Assign User Groups
Add user groups who require log on to papercut services.
Screenshot retained for review