Contact UsContact Us

How do I obtain a list of candidate names from my EntraID domain?

Before you can obtain a list of users from your EntraID domain, you will have to allow ExamWritePad access to read your domian, groups and users.

1. Login to your EntraID online portal and whilst in the default directory, click on "App Registrations" then click on "New Registration" (as shown below)

Image showing Entra open with App Registrations and New Registration highlighted

 

2. Type in a "Name" for the application, use "ExamWritePad" if you don't want to create you own. Then under the "Supported account types" make sure you select "Accounts in any organisational directory (multitenant)" and proceed to click on "Register" (as shown below)

Image showing the Register an application window and its aforementioned selections

 

3. Make a note of the "Client Id" and "Tenant Id" because these will be needed in the ConfirEditorGUI app later on. (as shown below)

Image showing the completed registered application with its IDs

 

4. On the left hand side click on "Certificates & Secrets" and then click on "New client secret" (as shown below)

Image showing the Certificates and Secrets menu with New Client secret highlighted

 

5. For the "Description" type in "Secret" and set the "Expires" to "730 days (24 months)" then click on "Add" (as shown below)

Image demonstrating the secret being added

 

6. In the list of client secrets you will see your newly created secret, look for the "value" and click on the 'copy' icon to the right of the value and keep it stored in a safe place to again use in the ConfirEditorGUI app later on as your 'ClientSecret'.

Image demonstrating the location of secret value


7. Now proceed to click on "API Permissions" on the left hand side. Then to the right hand side of 'User.Read' click on the "three dots" and select "Remove permission".

Image demonstrating the remove permission process for User.Read


8. Now click on "Add a permission".

Image showing the Add a permission button


9. From the top down, Select "Microsoft APIs" then select "Microsoft Graph", then select "Application permissions" and type in the filter box "User.Read.All" and check/tick the box to the left (as shown below) and finally click on "Add permissions". 

Image demonstrating the steps for adding User.Read.All to the permissions


10. Now repeat steps 8 and 9 for the following other permissions you need to add:

  • Group.Read.All
  • Domain.Read.All
  • GroupMember.Read.All

 

11. Now you have the four permissions listed, click on "Grant admin consent for default directory" and on the confirmation box click on "Yes" (as shown below).

Image showing the location of the Grant admin consent for default directory button

Image showing the confirmation box after clicking Grant admin consent


12. All you now need to do for the final step is to make sure that your users have a 'givenName' and 'surname' and create/add them to a group so that this group name will be used in the ConfirEditorGUI app.

When you launch the ConfigEditorGUI app and load in your ExamWritePadSettings.json file, you should now have all the information available to populate the follow config options:

  • EntraID_ClientId (this is the 'Client Id' you noted down)
  • EntraID_ClientSecret (this is the 'Client Secret' you noted down)
  • EntraID_TenantId (this is the 'Tenant Id' you noted down)
  • EntraID_GroupName (this is the name of the group you want to use)
  • EntraID_GetCandidateNames (set this option to 1)

Now when you launch ExamWritePad the list of users within the defined group should now be listed in the Candidate Name dropdown box.

Still need help? Contact us here