Setting Up 365 Scout with Microsoft Entra | Full Installation Guide
This guide walks you through setting up 365 Scout with Microsoft Entra by registering an app, granting permissions (Delegated + Application), generating credentials, and syncing your Microsoft 365 environment through ChannelProgram.
Setting Up 365 Scout with Microsoft Entra | Full Installation Guide
365 Scout integrates with Microsoft Entra to help sync and monitor your Microsoft 365 environment. This article will guide you step-by-step through the setup process, including Microsoft Entra App Registration, permissions, and connecting your Client ID and Client Secret in ChannelProgram.
Prerequisites
- You must be subscribed to 365 Scout to integrate. Talk to our team.
- 
You must be a Global Administrator in Microsoft 365 to complete this setup. 
- 
You will need access to ChannelProgram.com and entra.microsoft.com. 
- 
Keep a secure location ready to save your Client ID and Client Secret values. 
Step 1: Access 365 Scout in ChannelProgram
- 
Log in to ChannelProgram.com. 
- 
In the left-hand menu, click "BetterTracker". 
- 
From the submenu, click "365 Scout". 
- 
Read the Setup Guide in Step 1 before proceeding. 
Step 2: Register 365 Scout in Microsoft Entra
- 
Navigate to entra.microsoft.com. 
- 
In the left-hand menu, click "App Registrations".  
- 
Click "New Registration".  
4. On the "Register an Application" page:
- 
Enter 365 Scout as the name. 
- 
Select Accounts in this organization only (Single Tenant). 
 
 
- 
Click "Select a Platform", then choose "Web". 
 
 
- 
Copy and Paste the "Redirect URL" into the Web URL field. Redirect URL: https://channelprogram-h.us2.cyclr.com/connector/callback
 
 
- 
Click "Register'. 

Step 3: Configure API Permissions
- 
From your new application page, click "API Permissions".  
- 
Click "Add a Permission"  
- Click on "Microsoft Graph" 
- 
Select "Delegated Permissions"  
- 
Click on "Select Permissions" search  
- 
Checkbox all the following permissions - 
Application.Read.All
- 
AuditLog.Read.All
- 
Directory.Read.All
- 
User.Read
- 
User.Read.All
 
- 
- 
Next we need to select "Application Permissions"  
- 
Search in "Select Permissions" for the following permissions and checkbox: - 
AuditLog.Read.All
- 
Application.Read.All
 
- 
- 
After selecting all permissions, click Add Permissions.  
- 
Confirm all permissions are listed correctly.  
- 
Click Grant Admin Consent for [Your Company]  
Step 4: Generate a Client Secret
- 
From the app menu, click "Certificates & Secrets".  
- 
Click "New Client Secret".  
- 
In the description field, enter "365 Scout". 
- 
Select an expiration of "730 days (24 months)".  
- 
Click "Add". 
- 
Copy the "Client Secret Value" immediately and store it securely. NOTE: The Client Secret Value is a one time view and you will not be able to view it again  
Step 5: Copy the Application (Client) ID
- 
Go to the "Overview" section of your app.  
- 
Copy the "Application (Client) ID".  
- 
Save both the "Application (client) ID" and "Client Secret" in a secure location. NOTE: The Client Secret Value is a one time view and you will not be able to view it again
Step 6: Connect 365 Scout in ChannelProgram
- 
Return to ChannelProgram.com. 
- 
On the 365 Scout setup page, scroll down to the Microsoft Install box.  
- 
Click the blue "Install" button.  
- 
Enter your Client ID (this is the "Application (client) ID" from Entra) and Client Secret into the fields.  
- 
Click "Sign In".  
- 
365 Scout will begin syncing your Microsoft 365 users and apps. - 
Depending on your company size, syncing may take a few minutes to an hour. 
- 
Refresh the page to check sync progress. 
  
- 
Tips
- 
Save your Client Secret somewhere safe such as password manager since it cannot be retrieved again. 
- 
Ensure you grant both Delegated and Application Permissions before completing setup. 
- 
If sync takes longer than expected, try refreshing after an hour. 
Common Errors & Fixes
- 
Missing Permissions → Double-check that you included all Delegated and Application Permissions listed above. 
- 
Invalid Client Secret → Make sure you copied the Value (not the ID). 
- 
Not Authorized → Confirm you are logged in as a Global Administrator. 
FAQ
Q: Do I need to be a Global Administrator?
Yes, only Global Administrators can grant the required Microsoft Graph permissions.
Q: How long does syncing take?
It depends on your company volume—anywhere from a few minutes to an hour.
Q: Can I regenerate a Client Secret later?
Yes, you can create a new one in Microsoft Entra under Certificates & Secrets.
Q: What if I forget to save my Client Secret?
You must create a new one—Microsoft does not allow retrieving it again.
Troubleshooting
- 
Issue: Sync never starts. 
 Fix: Verify Client ID and Client Secret are correct. Ensure Admin Consent was granted.
- 
Issue: Permissions error when signing in. 
 Fix: Recheck API Permissions and confirm both Delegated and Application types were added.
- 
Issue: Expired Client Secret. 
 Fix: Generate a new Client Secret with a 730-day expiration and update it in ChannelProgram.
![CP__Logo_Horizontal_OrangeNavy.png]](https://help.channelprogram.com/hs-fs/hubfs/All%20Branding%20-%20CP%20and%20BetterTracker/Branding%20and%20Logos%20-%20ChannelProgram/CP__Logo_Horizontal_OrangeNavy.png?height=40&name=CP__Logo_Horizontal_OrangeNavy.png)