home

Mobile Endpoint Security

Lookout Product Documentation

Find answers about using and optimizing Lookout products.

Setting up API permissions for the iOS app

After registering Lookout for Work in Entra ID, you must add Lookout MTP and Microsoft Graph API permissions to your App Registration:

  1. Log in to the Azure Management Portal.
  2. Navigate to Entra ID > App registrations and select your newly registered app.
  3. On the Registered app screen, under Manage, click API permissions.

    Lookout for Work already requests the Microsoft Graph User.Read permission, which allows it to sign the device user into Entra ID.

  4. Click + Add a permission.
  5. In the Request API permissions blade, click the APIs my organization uses tab, then search for and select Lookout MTP:


  6. Check user_impersonation:


    This permission allows the Lookout app to act on behalf of the user to retrieve their Entra ID token.

  7. Click Add permissions.

    Lookout displays a success prompt with a warning that users have to consent to the changes.

  8. Click Grant admin consent for <organization > .

    A confirmation prompt appears at the top of the screen:

  9. Click Yes and wait for a success prompt.

    Depending on the logged in account, you may be redirected to the Admin consent page rather than granting consent within Entra ID.

    Your resulting permissions list should have 1 delegated permission for each API. Entra ID is now fully configured.