Setting up API permissions for the iOS app
After registering Lookout for Work in Entra ID, you must add Lookout MTP and Microsoft Graph API permissions to your App Registration:
- Log in to the Azure Management Portal.
- Navigate to Entra ID > App registrations and select your newly registered app.
- On the Registered app screen, under Manage, click API permissions.
Lookout for Work already requests the Microsoft Graph
User.Read
permission, which allows it to sign the device user into Entra ID. - Click + Add a permission.
- In the Request API permissions blade, click the APIs my organization uses tab, then search for and select Lookout MTP:
- Check user_impersonation:
This permission allows the Lookout app to act on behalf of the user to retrieve their Entra ID token.
- Click Add permissions.
Lookout displays a success prompt with a warning that users have to consent to the changes.
- Click Grant admin consent for <organization > .
A confirmation prompt appears at the top of the screen:
- Click Yes and wait for a success prompt.
Depending on the logged in account, you may be redirected to the Admin consent page rather than granting consent within Entra ID.
Your resulting permissions list should have 1 delegated permission for each API. Entra ID is now fully configured.