Lutril connects to Microsoft Entra ID (Azure AD) as a registered app using the OAuth 2.0 client credentials flow. You provide the Tenant ID, Client ID, and a Client Secret, and grant Microsoft Graph application permissions.
Microsoft Graph: User.ReadWrite.All (application, required to create or update users)
Setup steps
In the Microsoft Entra admin center, go to Entra ID, then App registrations, and select New registration. Name the app and register it. New registration
On the app Overview page, copy the Application (client) ID and the Directory (tenant) ID into Lutril.
Open Certificates and secrets, click New client secret, set an expiry, then copy the secret Value (shown only once) into Lutril.
Open API permissions, click Add a permission, choose Microsoft Graph, then Application permissions, and add the permissions listed above.
Click Grant admin consent for your tenant and confirm that each permission shows Granted under Status.
