Register Single-Tenant App for Viva Engage

These steps are for anyone who wants more fine grained control, keeping the app registration restricted to a single tenant.

You will need to provide the following information to the Yammer setup to install SWOOP:

Your Microsoft Tenant ID
Application ID (or Client ID)
Client Secret

If you don't understand the above please make an appointment with our support team to walk you through the process.

This screenshot shows an example application registration.

The standard Web redirect URI for all SWOOP applications is https://oauth.swoopanalytics.com which is shown below. NOTE: this is NOT a "Single-Page" application, it is a standard web server app.

This app is set to a Single Tenant App. Implicit grants are not used.

You will need to generate a client secret and keep a copy of this. Note that depending on local security policies, that secret will need to be updated when it expires.

These are the app permissions. NOTE: the Yammer permission is what allows the app to access Yammer when a user logs in, it is a "delegated" permission therefore it always needs a user account in order to operate. The "offline_access" is what allows the token to refresh for up to 90 days. This is how the data miner collects metadata.

Optional Extra Permissions

See reference at the bottom of this page about "Native Mode" and also see this support article - https://support.swoopanalytics.com/hc/en-us/articles/4414996084877-Extending-Azure-Active-Directory-to-Synchronise-Group-Community-Members-Viva-Engage-
It might be useful to combine everything into a single app by adding in the permissions to allow very large community membership to be mined over the Microsoft Graph API. This step is not compulsory and can be added later.