To connect Dex to Microsoft 365 Licenses, register an application in your Microsoft Entra ID tenant and grant it the required Microsoft Graph permissions.
Steps
1Sign in to the Microsoft Entra admin center or Azure Portal as at least a Cloud Application Administrator.
2Navigate to Identity > Applications > App registrations and click New registration.
3Name the application (e.g., Dex M365 Licenses Integration) and click Register.
4Note down the Application (client) ID and Directory (tenant) ID from the Overview page.
5Under Manage, select Certificates & secrets > Client secrets > New client secret. Add a description, set an expiration, and click Add. Copy the secret Value immediately (you won't be able to retrieve it later).
6Under Manage, select API permissions > Add a permission > Microsoft Graph > Application permissions, then search for and check LicenseAssignment.ReadWrite.All and Organization.Read.All (recommended, to read organization SKU details).
7Click Add permissions, then click Grant admin consent for [Your Organization] and select Yes to confirm.
Paste into Dex
The connection form in the Dex app store asks for these values:
Application (client) ID
Directory (tenant) ID
Client secret (Value)
Copy immediately — you won't be able to retrieve it later.
