Differences

This shows you the differences between two versions of the page.

--- general:registering_an_organziation_with_the_app_store [2022/03/18 12:11] – [What Permissions are Requested?] su
+++ general:registering_an_organziation_with_the_app_store [2022/06/09 08:37] (current) – su
@@ Line 9: / Line 9: @@
 //**Registering has the following advantages:**//
   * Single Sign-On is enabled for users, meaning they can log in to the Industrial App Store with their work credentials.
   * Organizations can enforce the use of security features such as multi-factor authentication (MFA) when signing users in.
@@ Line 18: / Line 18: @@
 //Organizations can remove the Industrial App Store from their approved application list at any time. Registering **does not allow** Intelligent Plant to browse an organization's Azure Active Directory, view or modify group memberships, or obtain secure credentials such as passwords.//
+//For more information about how Azure AD supports user sign-in, refer to Microsoft's notes on [[https://docs.microsoft.com/en-us/azure/active-directory/develop/application-consent-experience|Understanding Azure AD application consent experiences]].//
 ===== Who can Register an Organization? =====
-To register with the Industrial App Store, your organisation must use Microsoft Azure Active Directory. If your organisation uses Microsoft 365 Enterprise, (formerly Office 365) you are already using Azure Active Directory!
+To register with the Industrial App Store, your organization must use Microsoft Azure Active Directory. If your organization uses Microsoft 365 Enterprise, (formerly Office 365) you are already using Azure Active Directory!
-To be able to register your organisation, you must be assigned to one of the following [[https://docs.microsoft.com/en-us/azure/active-directory/roles/permissions-reference#global-administrator--company-administrator|Azure Active Directory Roles]]:
+To be able to register your organization, you must be assigned to one of the following [[https://docs.microsoft.com/en-us/azure/active-directory/roles/permissions-reference#global-administrator--company-administrator|Azure Active Directory Roles]]:
   * Global Administrator
@@ Line 41: / Line 43: @@
 ===== What Permissions are Requested? =====
-The Industrial App Store requests the [[https://docs.microsoft.com/en-us/graph/permissions-reference#user-permissions|"Sign in and read user profile"]] permission for the [[https://docs.microsoft.com/en-us/graph/|Microsoft Graph]]. This permission (also known as ''User.Read'') allows the Industrial App Store to retrieve basic information about your organization's users when they sign in to personalise their experience.
+The Industrial App Store requests the [[https://docs.microsoft.com/en-us/graph/permissions-reference#user-permissions|"Sign in and read user profile"]] permission for the [[https://docs.microsoft.com/en-us/graph/|Microsoft Graph]]. This permission (also known as ''User.Read'') allows the Industrial App Store to retrieve basic information about your organization's users when they sign in to personalise their experience. For more info on how this data is used, refer to our [[https://appstore.intelligentplant.com/Content/assets/legal/IAS-PrivacyPolicy.html|Privacy Policy]].
 Consent for this scope is requested on behalf of your organization, which is why you must be in one of the required administrative roles described above in order to grant this consent.
@@ Line 50: / Line 52: @@
 Microsoft has announced that the Azure AD Graph is being retired in favour of the Microsoft Graph. Requesting the permission from both APIs allows the Industrial App Store to maintain backwards compatibility until support for the Azure AD Graph is removed.
-//**How do you use the information that you collect about users?**//
-Refer to our [[https://appstore.intelligentplant.com/Content/assets/legal/IAS-PrivacyPolicy.html|Privacy Policy]].