SmartDEM – Entra ID Configuration Guide

This guide explains how your IT administrator can configure Microsoft Entra ID (Azure AD) so that users do not see a permission consent screen when signing into SmartDEM for the first time.

This guide explains how your IT administrator can configure Microsoft Entra ID (Azure AD) so that users do not see a permission consent screen when signing into SmartDEM for the first time.

By granting admin consent, you authorise SmartDEM for your organisation, enabling smooth sign-in and enforcing centralised permission governance.

1. Required Permissions

SmartDEM requires the following standard authentication permissions:

Permission Type
Permission
Purpose

Microsoft Graph (Delegated)

User.Read

Basic user profile access needed for sign-in

OpenID Connect

openid, email, profile

Identity claims for authentication

Optional Extras

offline_access

Enables token refresh without requiring users to re-authenticate

These are minimal, industry-standard permissions for enterprise single sign-on.

SmartDEM provides a dedicated admin consent URL your organisation's Entra ID administrator can use to pre-authorise the app.

Click (or paste into browser):

https://login.microsoftonline.com/common/adminconsent?client_id=89910b4a-9326-45ac-8292-aeab2a54a7f1

Steps:

  1. Sign in using an account with one of these roles:

    • Global Administrator

    • Cloud Application Administrator

    • Privileged Role Administrator

  2. You will be shown the list of permissions SmartDEM requires.

  3. Click Accept.

If you prefer to configure SmartDEM manually through the Azure portal, follow these steps.

Step 1 — Sign in to the Microsoft Entra Admin Centre

Go to:

https://entra.microsoft.com/arrow-up-right

Sign in using an account with admin permissions.

Step 2 — Locate the SmartDEM Application

Depending on whether any user has already initiated sign-in, SmartDEM may or may not already appear.

If SmartDEM is already visible:

  1. Navigate to: Identity → Applications → Enterprise Applications

  2. Search for: SmartDEM or search using the Client ID:

Select the application.

If SmartDEM does NOT appear yet:

You can manually add it.

  1. Go to: Enterprise Applications → + New Application

  2. Choose "Create your own application"

  3. Select "Integrate any other application you don't find in the gallery"

  4. Enter: SmartDEM

  5. Once created, go to: Properties → Application ID and replace it with the actual App ID if needed (SmartDEM will overwrite metadata after first login).

Inside the SmartDEM application:

  1. Go to: Permissions (or: Security → Permissions)

  2. Review the listed permissions

  3. Click Grant admin consent for <TenantName>

  4. Approve the permissions when prompted

4. Optional — Assign Users or Groups

If SmartDEM requires assigned access:

  1. Go to: Enterprise Applications → SmartDEM → Users and Groups

  2. Click Add user/group

  3. Add either:

    • Individual users

    • Security groups

    • Admin roles

Last updated