Skip to content
English
  • There are no suggestions because the search field is empty.

Setting Up 365 Scout with Microsoft Entra | Full Installation Guide

This guide walks you through setting up 365 Scout with Microsoft Entra by registering an app, granting permissions (Delegated + Application), generating credentials, and syncing your Microsoft 365 environment through ChannelProgram.

Setting Up 365 Scout with Microsoft Entra | Full Installation Guide

365 Scout integrates with Microsoft Entra to help sync and monitor your Microsoft 365 environment. This article will guide you step-by-step through the setup process, including Microsoft Entra App Registration, permissions, and connecting your Client ID and Client Secret in ChannelProgram.


Prerequisites

  • You must be subscribed to 365 Scout to integrate. Talk to our team.
  • You must be a Global Administrator in Microsoft 365 to complete this setup.

  • You will need access to ChannelProgram.com and entra.microsoft.com.

  • Keep a secure location ready to save your Client ID and Client Secret values.


Step 1: Access 365 Scout in ChannelProgram

  1. Log in to ChannelProgram.com.

  2. In the left-hand menu, click "BetterTracker".

  3. From the submenu, click "365 Scout".

  4. Read the Setup Guide in Step 1 before proceeding.


Step 2: Register 365 Scout in Microsoft Entra

  1. Navigate to entra.microsoft.com.

  2. In the left-hand menu, click "App Registrations".

  3. Click "New Registration".

4. On the "Register an Application" page:

  • Enter 365 Scout as the name.

  • Select Accounts in this organization only (Single Tenant).


 
  • Click "Select a Platform", then choose "Web".


 
  • Copy and Paste the "Redirect URL" into the Web URL field.

    Redirect URL:  https://channelprogram-h.us2.cyclr.com/connector/callback

 
  • Click "Register'.




Step 3: Configure API Permissions

  1. From your new application page, click "API Permissions".



  2. Click "Add a Permission"

  3. Click on "Microsoft Graph"


  4. Select "Delegated Permissions"

  5. Click on "Select Permissions" search

  6. Checkbox all the following permissions

    • Application.Read.All

    • AuditLog.Read.All

    • Directory.Read.All

    • User.Read

    • User.Read.All

  7. Next we need to select "Application Permissions"

  8. Search in "Select Permissions" for the following permissions and checkbox:

    • AuditLog.Read.All

    • Application.Read.All

  9. After selecting all permissions, click Add Permissions.

  10. Confirm all permissions are listed correctly.

  11. Click Grant Admin Consent for [Your Company]


Step 4: Generate a Client Secret

  1. From the app menu, click "Certificates & Secrets".

  2. Click "New Client Secret".

  3. In the description field, enter "365 Scout".

  4. Select an expiration of "730 days (24 months)".

  5. Click "Add".

  6. Copy the "Client Secret Value" immediately and store it securely.

    NOTE: The Client Secret Value is a one time view and you will not be able to view it again


Step 5: Copy the Application (Client) ID 

  1. Go to the "Overview" section of your app.

  2. Copy the "Application (Client) ID".

  3. Save both the "Application (client) ID" and "Client Secret" in a secure location.

    NOTE: The Client Secret Value is a one time view and you will not be able to view it again

Step 6: Connect 365 Scout in ChannelProgram

  1. Return to ChannelProgram.com.

  2. On the 365 Scout setup page, scroll down to the Microsoft Install box.

  3. Click the blue "Install" button.

  4. Enter your Client ID (this is the "Application (client) ID" from Entra) and Client Secret into the fields.

     

  5. Click "Sign In".

  6. 365 Scout will begin syncing your Microsoft 365 users and apps.

    • Depending on your company size, syncing may take a few minutes to an hour.

    • Refresh the page to check sync progress.



Tips

  • Save your Client Secret somewhere safe such as password manager since it cannot be retrieved again.

  • Ensure you grant both Delegated and Application Permissions before completing setup.

  • If sync takes longer than expected, try refreshing after an hour.


Common Errors & Fixes

  • Missing Permissions → Double-check that you included all Delegated and Application Permissions listed above.

  • Invalid Client Secret → Make sure you copied the Value (not the ID).

  • Not Authorized → Confirm you are logged in as a Global Administrator.


FAQ

Q: Do I need to be a Global Administrator?
Yes, only Global Administrators can grant the required Microsoft Graph permissions.

Q: How long does syncing take?
It depends on your company volume—anywhere from a few minutes to an hour.

Q: Can I regenerate a Client Secret later?
Yes, you can create a new one in Microsoft Entra under Certificates & Secrets.

Q: What if I forget to save my Client Secret?
You must create a new one—Microsoft does not allow retrieving it again.


Troubleshooting

  • Issue: Sync never starts.
    Fix: Verify Client ID and Client Secret are correct. Ensure Admin Consent was granted.

  • Issue: Permissions error when signing in.
    Fix: Recheck API Permissions and confirm both Delegated and Application types were added.

  • Issue: Expired Client Secret.
    Fix: Generate a new Client Secret with a 730-day expiration and update it in ChannelProgram.