this video shows you how to integrate a Microsoft Azure active directory spoke with a servicenow instance the integration helps you to manage users and groups assign and unassigned devices and manage passwords and licenses we're logged into our servicenow instance with the admin role before we begin the integration we need to make sure the Microsoft Azure active directory spoke is installed and it is to create an Azure application first we'll navigate to the Azure portal select app registrations and then new registration to initiate the app creation we'll name the application then select the account type for this example we'll select single tenant because our instance of azure is used only by our organization next we need to enter the redirect URI which is the URI that Azure will use to make a callback to the servicenow instance once the authentication is complete you can get the redirect URL from the servicenow documentation we'll change the url to include our instance ID under platform we'll select web platform then register take note of the client and tenant ID details we'll need these details later the next step is to generate the secret for your application the client secret is used by the servicenow instance in our oauth application registry to generate the required tokens for establishing a connection with the Azure active directory apis to generate the secret navigate to certificates and secrets and select new client secret enter a description and select add here is the secret that Azure generated for us this is the only time that Azure will show us the generated secret so let's make sure we save it now we need to provide the permissions for our application each action has a different set of permissions for this demo we'll add the permissions that allow us to add an owner to a Microsoft Azure Active Directory Group to do this navigate to API permissions and select add a permission choose delegated permissions and search for the permissions that the action requires then select add permissions now we need to Grant admin consent for them select Grant admin consent for servicenow the next step is to configure the integration in the servicenow flow designer application navigate to flow designer and select the connections tab in the Azure ad tile select view details then configure now we need to provide information for our integration to work we'll get this information from servicenow product documentation and the details like client ID and secret that were saved in the earlier steps get the off URL from the servicenow documentation and replace directory ID with your Azure application tenant ID do the same for the token URL and revoke token URL fields in the oauth client ID field enter the Azure application client ID then enter the client secret finally in the redirect URL replace your instance name select configure and get oauth token provide your Azure account login credentials for authentication an access token is generated and stored in the servicenow instance this token will expire after a certain amount of time but it will be automatically refreshed by the servicenow platform now you can use the predefined Azure actions to create your flows and exchange data between the two applications for more information see our product documentation or knowledge base or ask a question in the servicenow community