home

Mobile Endpoint Security

Mobile Endpoint SecuritySecurity Service Edge
Mobile Endpoint SecuritySecurity Service Edge

Lookout Product Documentation

Find answers about using and optimizing Lookout products.

Show Contents

Mobile Endpoint Security

Configuring the Lookout for Work iOS app in Entra ID

Setting up API permissions for the iOS app

After registering Lookout for Work in Entra ID, you must add Lookout MTP and Microsoft Graph API permissions to your App Registration:

  1. Log in to the Azure Management Portal.
  2. Navigate to Entra ID > App registrations and select your newly registered app.
  3. On the Registered app screen, under Manage, click API permissions.

    Lookout for Work already requests the Microsoft Graph User.Read permission, which allows it to sign the device user into Entra ID.

  4. Click + Add a permission.
  5. In the Request API permissions blade, click the APIs my organization uses tab, then search for and select Lookout MTP:


  6. Check user_impersonation:


    This permission allows the Lookout app to act on behalf of the user to retrieve their Entra ID token.

  7. Click Add permissions.

    Lookout displays a success prompt with a warning that users have to consent to the changes.

  8. Click Grant admin consent for <organization > .

    A confirmation prompt appears at the top of the screen:

  9. Click Yes and wait for a success prompt.

    Depending on the logged in account, you may be redirected to the Admin consent page rather than granting consent within Entra ID.

    Your resulting permissions list should have 1 delegated permission for each API. Entra ID is now fully configured.

Last updated: September 30, 2024

lookout-footer

Legal Privacy Policy Cookie Policy Transparency Report Compliance Info Compliance Info (Gov)

© 2024 Lookout, Inc. LOOKOUT®, the Lookout Shield Design®, LOOKOUT with Shield Design® and the Lookout multi-color/multi-shaded Wingspan Design® are registered trademarks of Lookout, Inc. in the United States and other countries. DAY OF SHECURITY®, LOOKOUT MOBILE SECURITY®, and POWERED BY LOOKOUT® are registered trademarks of Lookout, Inc. in the United States. Lookout, Inc. maintains common law trademark rights in EVERYTHING IS OK, PROTECTED BY LOOKOUT, CIPHERCLOUD, and the 4 Bar Shield Design.