Create Custom Scope in Microsoft Entra ID

You use the custom scope in the Identity provider so that you can pass the same token to the Web API used in the workflow.

To create a custom scope in Microsoft Entra ID:

1. Access the Microsoft Azure portal.

2. Click App registrations in the left navigation pane.

3. Select the registered application.

4. Click Expose an API in the left navigation panel.

5. Click Application ID URI link and make sure the URI name has correct client id and worktasks. For example, api://<client id>/worktasks

6. To define the scope, click a link under Scopes for the registered application.

   1. Enter awt.workflow as the scope name.

   2. Enter the other details.

      

7. To authorize client applications, click a link under Client Id.

   1. Select the check box for the created custom scope under Authorized scopes.

      

8. Click Save.

   The custom scope for the Work Tasks application gets created in the Microsoft Entra ID.

   Note: Make sure the Client ID matches the client id mentioned in the Farm Configuration Wizard.