Microsoft Copilot Connector Setup

Connect HQ to Microsoft Copilot

To connect HQ to Microsoft Copilot, please collect and share the following three values with us:

• Tenant ID
• Client ID
• client secret

This guide walks you through generating them in Microsoft Entra / Azure.

Required role: A Microsoft Entra administrator who can create app registrations, add Microsoft Graph application permissions, and grant admin consent.

Note on portals: Microsoft Entra ID (formerly Azure AD) can be managed from either the Azure Portal (portal.azure.com) or the Microsoft Entra admin center (entra.microsoft.com). Both lead to the same App registrations — use whichever you prefer.

Step 1 — Register the Application

Option A — Microsoft Entra admin center

1. Open https://entra.microsoft.com
2. Navigate to Identity → Applications → App registrations

Option B — Azure Portal

1. Open https://portal.azure.com
2. Search for Microsoft Entra ID (or Azure Active Directory)
3. Select App registrations from the left menu

Then, in either portal:

1. Click New registration
2. Fill in the form:
   • Name: HQ Copilot connector (or any descriptive name your organization prefers)
   • Supported account types: Accounts in this organizational directory only (single-tenant)
   • Redirect URI: Leave blank
3. Click Register

Step 2 — Copy the Tenant ID and Client ID

On the app's Overview page, copy these two values:

Warning: Do not copy the Object ID. It looks similar but is a different identifier and is not used for authentication.

Step 3 — Add Microsoft Graph API Permissions

1. In the same app registration, open API permissions
2. Click Add a permission → Microsoft Graph → Application permissions
3. Add the following permissions:

4. Click Add permissions
5. Click Grant admin consent for {your tenant name}
6. Verify each permission shows Granted for {tenant}

Step 4 — Create the client secret

1. In the app registration, open Certificates & secrets
2. Select the Client secrets tab
3. Click New client secret
4. Fill in:
   • Description: HQ connector (or any label your organization uses for tracking)
   • Expires: Match your organization's security policy (e.g., 6, 12, or 24 months)
5. Click Add
6. Immediately copy the Value — this is the client secret

Warning: The secret value is only displayed once. If you navigate away before copying it, you'll have to delete it and create a new one. Copy Value, not Secret ID — the Secret ID is not used in authentication.

Step 5 — Share the Credentials with HQ

Send us the three values securely:

• Tenant ID
• Client ID
• client secret

Please use a secure channel (e.g., a password manager share link or your organization's approved secret-sharing method).

References