Overview: - The information needed to integrate your CSP Direct tenant is contained in this PDF Guide. You will be asked to create and access various authentication keys and which you need to do in the Microsoft Partner Centre and Azure Portal for which you will be required to have the appropriate permissions. Important - CSP template file. As you go through this process, capture the inputted information, along with the screen prints, in the CSP template file (click to open) This completed document will be required by Cloudmore support if you have any problems. Cloudmore 1 of 24 v5 2017 06
Follow these steps instructions below to integrate your CSP Direct Tenant. 1. Add the 0365 CSP direct service from your marketplace 2. Find your partner tenant ID 3. Create your partner centre application ID 4. Create a user for Cloudmore SDK 5. Create your graph application 6. Set your permissions (Azure graph API) 7. Create your graph application secret 8. Find your graph application ID URL 9. Set your permissions (Partner centre native App) 10. Enter the information in Cloudmore 11. Run the PowerShell scripts You must use a Global Admin account when completing each step in this guide. Do not enter the information in the Cloudmore platform until you have completed step 9. Save the information in the CSP template file until it is needed. Cloudmore 2 of 24 v5 2017 06
Integrate your CSP Direct Agreement Step 1: Add the 0365 CSP direct service from your marketplace Log in to Cloudmore. Navigate to your reseller menu, then click on marketplace. Locate the Microsoft 0365 CSP direct service. Click on service to add and follow on screen instructions. Cloudmore 3 of 24 v5 2017 06
Step 2: Find your partner tenant ID With your Global Admin Account - Login to your partner center, https://partnercenter.microsoft.com. Navigate to account settings, then select organizational profile. xxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxx Copy the Microsoft ID (Partner Tenant ID) to the CSP template file. Screen print the page and save in the CSP template file under the correct heading. Cloudmore 4 of 24 v5 2017 06
Integrate your CSP Direct Agreement Step 3(a): Create your partner centre application ID Navigate to account settings, then select app management. Click add new native app. Cloudmore 5 of 24 v5 2017 06
Step 3 (b): Create your partner centre application ID Copy the app name to the CSP template file. xxxxxxx-xxxx-xxxx-xxxx-xxxxxx Copy the app ID to the CSP template file. Screen print this page and save in the CSP template file under the correct heading. Cloudmore 6 of 24 v5 2017 06
Step 4(a): Create a user for Cloudmore SDK Navigate to account settings. Select user management. Click add new native app. Cloudmore 7 of 24 v5 2017 06
Step 4(b): Create a user for Cloudmore SDK 1 2 3 4 Name the account Select admin agent in the Click add. A temporary Copy the PC user name Cloudmore SDK account. Assists your customers as password will be displayed. (email address) and the new Note: Do not use an existing Select not an admin in the Login immediately using this PC password to the CSP account. Manages your company account and reset the template file. as. password. Cloudmore 8 of 24 v5 2017 06
Step 5(a): Create your graph application Using your Global Admin Account Login to your azure portal https://portal.azure.com. Navigate to azure active directory. Navigate to app registrations. Cloudmore 9 of 24 v5 2017 06
Step 5(b): Create your graph application Click + add. Enter the name azure graph API production. Select web app / API under Application type. Enter http://localhost under Sign-On URL. You need to click outside of the box to make the Create button turn blue. Then you can click on create. Once the app is created and you see a successful message in the top right corner. Click on the app you just created. Cloudmore 10 of 24 v5 2017 06
Step 6: Set your permissions (Azure graph API) Copy the application ID to the CSP template file. Click required permissions. Cloudmore 11 of 24 v5 2017 06
Step 6(a): Set your permissions (Azure graph API) Integrate your CSP Direct Agreement 1 2 3 4 Click + add Check the delegated Screen print the page and save Click windows azure active Select an API, select window permission (access azure in the CSP template file under directory. Set the permissions azure service management service management ), click the correct heading. as highlighted below. Click API. select > done to save the API. save. Cloudmore 12 of 24 v5 2017 06
Step 6(b): Set your permissions (Azure graph API) Tick the 4 permissions boxes that are marked. After saving, ensure the number of permissions allocated is showing 1 and 3. Screen print the page and save in the CSP template file under the correct heading. Cloudmore 13 of 24 v5 2017 06
Step 7: Create your graph application secret Click Keys. Enter a description, for instance graph API Key. Select never expires under Expires. Then click save. A value will be displayed. Copy the value immediately (Graph Application Secret) to the CSP template file. xxxxxxx-xxxx-xxxx-xxxx-xxxxxx You won t be able to view it again. Cloudmore 14 of 24 v5 2017 06
Step 8: Find your graph application ID URL Click properties. Under properties set multi-tenanted to yes. Copy the app ID URI to the template document. Screen print the page and save in the CSP template file under the correct heading. Cloudmore 15 of 24 v5 2017 06
Step 9(a): Set your permissions (Partner Centre Native App) Navigate to app registrations. Then select partner center native app. Cloudmore 16 of 24 v5 2017 06
Step 9(b): Set your permissions (Partner Centre Native App) Click required permissions Click windows azure active directory. Tick the 3 permissions boxes that are marked. Click save. After you save make sure the number of permissions allocated is 3. Screen print the page and save in the CSP template file under the correct heading. Cloudmore 17 of 24 v5 2017 06
Step 9(c): Set your permissions (Partner Centre Native App) Click + add. Click select an API, Select azure graph API production (that was created in step 5), click select. Add the permission called access azure graph API, click select and then done to save the API. Screen print the page and save in the CSP template file under the correct heading. Cloudmore 18 of 24 v5 2017 06
Step 10(a): Enter the details into Cloudmore Log in to Cloudmore. Navigate to your reseller menu. Click on my services, Microsoft 0365 CSP direct. Click on authentication keys. Cloudmore 19 of 24 v5 2017 06
Integrate your CSP Direct Agreement Step 10(b): Enter the details into Cloudmore Copy the keys from the template document and paste into Cloudmore. Cloudmore 20 of 24 v5 2017 06
Step 11(a): Run the PowerShell Scripts Requirements You need to use a 64-bit version of Windows and any of the following are supported: Windows 10 Windows 8.1 or Windows 8 Windows 2012 R2 or Windows Server 2012 Windows 7 Service Pack 1 (SP1) Windows Server 2008 R2 SP1 (a) Install Microsoft Online Services Sign-in Assistant (64-bit version). From https://www.microsoft.com/enus/download/details.aspx?id=41950 Then follow the on-screen installation instructions. (b) Install Windows Azure Active Directory Module for Windows PowerShell. From http://go.microsoft.com/fwlink/ p/?linkid=236297 Then follow the on-screen installation instructions. Choose to place an icon on the desktop during installation so you easily can find the application in next step. (c) Start the Windows Azure Active Directory Module for Windows PowerShell from the icon you placed on the desktop (otherwise you find it on the start menu). This will start a Windows PowerShell window with Azure. Cloudmore 21 of 24 v5 2017 06
Step 11(b): Run the PowerShell Scripts (d) Assign credentials (e) Connect to Microsoft Azure In the powershell window type: $UserCredential = Get-Credential And then click enter. This will bring a credentials prompt. Enter the same credentials you used to login to the Azure portal. Once done you have saved your login credentials in the variable $UserCredentials, we will use this in next step to login. Run the following command to use your credentials and login to Microsoft with PowerShell: Connect-MsolService -Credential $UserCredential If no error was received, that means you connected successful. The window should now look like this: Cloudmore 22 of 24 v5 2017 06
Step 11(c): Run the PowerShell Scripts (f) Save your "Azure Graph App" ID to variable. Run the following command to save your "Azure Graph App ID to a PowerShell variable: $AppID = <enter-your-azure Graph App-id-here> (g) Run the following command one by one. $group = Get-MsolGroup? {$_.DisplayName -eq 'AdminAgents'} $principal = Get-MsolServicePrincipal? {$_.AppPrincipalId -eq $AppID} Add-MsolGroupMember -GroupObjectId $group.objectid -GroupMemberType ServicePrincipal -GroupMemberObjectId $principal.objectid (h) Finished Now you are done. Close the PowerShell window to disconnect from Microsoft. Cloudmore 23 of 24 v5 2017 06
Step 12: Completing your setup 1. Import organizations/customers - Do this now if you have not already done so. 2. Link your CSP customer tenants - Enables data processing in Cloudmore. 3. Test CSP setup - Do this after you have linked your customer tenants. Click the links to access the relevant setup guides. END. Cloudmore 24 of 24 v5 2017 06