Prerequisites for Azure Active Directory
This section describes the prerequisites required to configure Azure Active Directory (Azure AD) with Kyvos, including the necessary Azure AD details and permissions needed to enable LDAP-based authentication for users in Kyvos.
Permissions required in Azure Active Directory (AD): The service principal provided for the Kyvos application will need the following permissions to access the Azure AD.
API / Permissions name | Type | Description | Admin consent required |
Directory.Read.All | Application | Read directory data | Yes |
User.Read | Delegated | Sign in and read user profile | No |
To grant this permission to the client ID, the following steps can be followed:
On the Azure portal, navigate to Home > App Registration and select the App for Kyvos.
Under API permissions, click Add a permission, and then click Microsoft Graph.
On the Request API permissions dialog box, select the Application Permissions option.
On the Select Permissions area, search for directory and select the Directory.Read.all option from the results.
Click Add Permissions. The permission is required for Kyvos to read from the Azure AD.
Directory.Read.All: To read directory data
User.Read: To sign in and read user profile