Register an Application in Azure Active Directory for Easy Workflow

To register an application in Azure Active Directory, you can refer to Microsoft documentation and search for the term application registration. For ease of use, you can follow the steps below.

Register an application

To register a new application, perform these steps:

1. Go to Azure Portal.
2. On the left pane, select Azure Active Directory.
3. On the Azure Active Directory page, select App registrations.
4. Under Manage > select App Registrations > New registration. The Register an application screen appears.

Note: The option to select New registration is available only for the role Application Developer.

5. Enter name of the application you want to configure. For example, Easy Workflow.
6. In the Supported account types section, select AzureADMyOrg radio button.
7. Select Register.

Note: If you are an owner of an existing application, go to the App registrations page, select Owned applications and search for the application.

Manage Certificates and Secrets

After registering your application, you can either upload the certificate or generate a new client secret. Select the application, and on the left pane, select the Certificates & secrets tab.

To create a new client secret,

1. Select Client secrets tab.
2. Select New client secret.
3. Enter a name or details in Description.
4. Select expiry duration from Expires combo.
5. Select Add. A new client secret is created.
6. Copy the client secret value and save it in another location for future use.

To upload the certificate,

1. Select Certificates tab.
2. Select Upload certificate.
3. Select the Browse button and select a certificate from your directory.

Note: You can upload only .cer, .pem, or .crt files to azure active directory.

4. Enter a name or details in Description.
5. Select Upload. The certificate you added gets uploaded to the azure active directory.

Assign API permissions

1. On the right pane, select API permissions.
2. Select Add a permission > Microsoft Graph > Application permissions.

   Note: Delegated-only permissions aren't supported. Easy workflow requires application permissions.

3. Search for the following permissions:
   • Mail.Read
   • Mail.ReadWrite
   • Mail.Send

   Note: Microsoft recommends caution with tenant‑wide access. To reduce exposure, you can restrict the app to specific users or mailboxes using group‑based controls such as Application Access Policies.

4. Select Add permissions. The permissions are added.
5. Select Grant admin consent for <Your domain name> for each permission to grant admin access.

After granting admin access, the status section in the list displays a green checkmark.

Import certificate to a local machine

This section is applicable only if you select Certificates in the Manage Certificates and Secrets section. You must import the certificate that you uploaded in the Azure Active Directory to the local machine where Easy Workflow is installed. While the azure active directory requires you to upload a certificate with .cer. or .pem, or .cet files as extensions, you must upload a .pfx copy of the certificate to your local machine. To import the certificate:

1. Go to Windows > Manage Computer Certificates > Personal.
2. In the Personal folder, right-click > All Tasks > Import. The certificate import wizard appears.
3. Import the <>.pfx copy of the certificate that you uploaded in the Azure Active directory.

Alternatively, you can also double-click the .pfx certificate file and perform the following to import the certificate to your local machine.

1. In the Certificate Import Wizard, select Local Machine and select Next.
2. In the Certificate Store section, select Place all certificates in the following store.
3. Select Browse > Personal.
4. Select Next and Finish.

The <certificate>.pfx file you added gets uploaded to the local machine.

Note: If the Easy Workflow Cockpit user is configured to use email settings, but the Windows user is a standard user, the Windows user must have permissions to access the certificate to send test emails.