# Register Lighthouse in Azure Active Directory-Lighthouse User Integration

## USER GUIDE

## Register Lighthouse in Azure Active

**Directory**  
1. Open your Azure Portal and select ‘Azure **Active Directory’**  
2. On the left, select ‘App registrations’  
3. Click ‘New registration’  
   a. Enter the name - “Lighthouse Azure AD User Connector”  
   b. Select ‘Accounts in this **organizational directory only’**  
   c. You can leave the Redirect URI blank  
   d. Click ‘Register’.  
4. Once created, click on ‘Certificates & **secrets’ in the left-hand menu**  
   a. Click ‘New client secret’  
   b. Provide a name, e.g. “Torque _Lighthouse”_  
   c. Set the ‘Expires’ value to the lesser of your Torque Software contract duration or your cybersecurity policy for secret key issuance  
   d. Select ‘Add’  
   e. When created, click the copy icon and save this value securely somewhere (note: it will not be accessible after you leave this step).  
5. Select ‘API permissions’ from the left-hand menu  
   a. Click ‘+ Add a permission’  
   b. Select ‘Microsoft Graph’  
   c. Select ‘Application permissions’  
   d. Search for and ‘add’ the following permissions:  
   i. Group.Read.All  
   ii. GroupMember.Read.All  
   iii. User.Read.All  
  
   e. When back on the Configured permissions view, click ‘Grant **admin consent for Torque** **Software’**  
   f. Select ‘Yes’ to the confirmation pop up to grant admin consent.

---

_Azure AD is now successfully configured for your_ _Lighthouse instance. If you would like to limit_ _the users in your Azure AD tenancy to those in a_ _specific group, follow the steps below._

## Restrict Lighthouse Users to a Specific

## Group (optional)

1. Select ‘Home’ in the top left  
2. Select ‘Azure Active Directory’  
3. Select ‘Groups’ from the left-hand menu  
4. Select ‘New group’  
   a. Leave ‘Group type’ as ‘Security’  
   b. Enter “Lighthouse Users” as the ‘Group name’  
   c. Enter a meaningful description for your administrative purposes  
   d. Click on ‘No members selected’ and add all the relevant users  
   e. Click ‘Create’.

## Configure Lighthouse to Integrate with

## Azure AD

Once you have carried out the steps above, you will have everything you need to integrate Lighthouse with Azure AD.

**Note: you must be in the ‘Data connection**

## administrators’ and ‘User and Organisation

## unit management team’ groups (found under

## System Settings, on the Permissions/Workflow

tab).

1. Select the Settings cog icon  
2. Select ‘Administration’  
3. Select ‘Import/Export User and **Organisational Structure’**  
4. Click ‘Add Data Source’  
5. Select ‘Azure AD (Microsoft Graph)’

---

## Register Lighthouse in Azure Active Directory-Lighthouse User Integration

6. From the “Lighthouse Azure AD User Connector" app registration overview page in Azure AD (created in the first section of this document), copy and paste the relevant values into the fields in Lighthouse:
   a. Copy and paste the ‘Directory **(tenant) ID’**  
   b. Copy and paste the ‘Application **(client) ID’**  
   c. Paste the ‘Secret value’ created in step 2 of this document into the ‘Client secret value’ field  
   d. If you configured a group to limit your users in the second section of this document, copy and paste the ‘Object Id’ from the group overview page into the ‘Lighthouse Users Object **(group) Id’ field**  
   e. Click ‘Test Access’.  
   If there is a problem, testing access it should let you know what it is, and give you ideas on how to remedy it. If the test succeeds, please continue configuring your import as per the user guide.