---
title: Creating Azure AD Graph API applications
description: To use the Azure AD Graph application programming interface (API), an application must exist to provide an application ID and key that PingAccess will use as the client ID and client secret for communication with the Graph API.
component: pingaccess
version: 9.0
page_id: pingaccess:pingaccess_user_interface_reference_guide:pa_creating_azure_ad_graph_api_apps
canonical_url: https://docs.pingidentity.com/pingaccess/9.0/pingaccess_user_interface_reference_guide/pa_creating_azure_ad_graph_api_apps.html
revdate: February 6, 2023
section_ids:
  about-this-task: About this task
  steps: Steps
---

# Creating Azure AD Graph API applications

To use the Azure AD Graph application programming interface (API) *(tooltip: \<div class="paragraph">
\<p>A specification of interactions available for building software to access an application or service.\</p>
\</div>)*, an application must exist to provide an application ID and key that PingAccess will use as the client ID and client secret for communication with the Graph API.

## About this task

Create the application in Azure AD through the **App Registrations** blade using these criteria:

* Name

  Enter a unique name for the application, such as "Graph API app"

* Application Type

  Web app / API

* Sign-on URL

  This field is not relevant for this particular use case, but is required by Azure AD. Enter the PingAccess host.

## Steps

1. After you create the application, navigate to the application in the list.

2. Select **Required permissions** and click **Add**.

3. Choose **Windows Azure Active Directory**, and then click **Save**.

   For **Application Permissions**, read the directory data.

4. Copy the **Application ID**.

5. Generate and copy a **Key**.