Registration in our system
First we will need to register you in our system. For this we need the Azure Entra Id tenant id of your company. This is the same tenant id that you use to login to the Azure portal. If you don't know this id, please contact your Azure administrator.
Consent the InSpark API app registration
After we have registered you in our system, You will need to consent the InSpark API app registration.
Using the following link for production:
https://login.microsoftonline.com/{your_tenant_id}/adminconsent?client_id=d88476e8-0173-4096-b6ad-ee3bc9e844d1
Using the following link for the sandbox:
https://login.microsoftonline.com/{your_tenant_id}/adminconsent?client_id=b93765b0-f98b-4e02-ba3e-22d31bec9a8b
You will need to login with your Azure global administrator account to consent the permissions.
Create your own app registration
After you have consented the InSpark Cloud Management Portal app registration, you will need to create your own app registration. This app registration will be used to authenticate to the InSpark API.
Create a single tenant app registration in the same tenant that you used in the first step.
Go to API permissions tab of the created app registration
Click on Add a permission
Click on APIs my organization uses
Search for InSpark Cloud Management Portal and select it
Under Application permissions select the scopes that you want to use
Authentication
Now that you have created your own app registration and given it the correct permissions to the InSpark app registration, you can authenticate with your own app registration.
We use the OAuth 2.0 client credentials grant flow for authentication. You can find more information about this flow here:
https://docs.microsoft.com/en-us/azure/active-directory/develop/v2-oauth2-client-creds-grant-flow
For the scope you can use https://api.inspark.nl/.default for production and https://test.api.inspark.nl/.default for the sandbox to get a token for with the correct permissions to call our API.