---
title: Registering PingFederate as an application in Azure Active Directory
description: To allow PingFederate to access Intune through the Microsoft Graph API, add an application in Azure Active Directory with the necessary permissions.
component: intune
page_id: intune:setup:pf_intune_ik_registering_pf_as_an_application_in_azure_active_directory
canonical_url: https://docs.pingidentity.com/integrations/intune/setup/pf_intune_ik_registering_pf_as_an_application_in_azure_active_directory.html
llms_txt: https://docs.pingidentity.com/integrations/intune/llms.txt
docs_for_agents: https://developer.pingidentity.com/build-with-ai/docs-for-agents.md
revdate: March 5, 2025
section_ids:
  steps: Steps
---

# Registering PingFederate as an application in Azure Active Directory

To allow PingFederate to access Intune through the Microsoft Graph API, add an application in Azure Active Directory with the necessary permissions.

## Steps

1. In Azure Active Directory, follow the steps in [Quickstart: Register an application in Microsoft Entra ID](https://learn.microsoft.com/en-us/entra/identity-platform/quickstart-register-app) in the Microsoft documentation.

2. Add the `DeviceManagementManagedDevices.Read.All` application permission from the Microsoft Graft API to your application by following the steps in [Configure app permissions for a web API](https://learn.microsoft.com/en-us/entra/identity-platform/quickstart-configure-app-access-web-apis) in the Microsoft documentation.

3. Note your Tenant ID, Application ID, and Application Secret. You will use these in [Configuring an adapter instance](pf_intune_ik_configuring_an_adapter_instance.html).