Microsoft Configuration Manager
GeneralManually register Microsoft Entra apps
In brief
The manual Azure AD app registration article no longer instructs administrators to set `oauth2AllowIdTokenImplicitFlow` to `true` in the app manifest. The article date changed from 03/11/2022 to 08/06/2026.
What Intune admins need to know
Administrators using this guide should follow the updated steps and no longer apply the removed manifest setting based on this documentation.
This summary was assembled from the tracked documentation change. Verify important details in the full Microsoft Learn article.
Documentation change
Open full page diff →The comparison below shows only the changed extract. Open the full-page diff for complete context.
title: Manually register Microsoft Entra apps
description: Manually create the required apps in Microsoft Entra ID to integrate the Configuration Manager site to support the cloud management gateway (CMG).
ms.date: 03/11/202208/06/2026
ms.subservice: core-infrastructure
ms.topic: how-to
ms.collection: tier3
1. Select **Add scope** to save.
In the menu of the app properties, selectManifest. Set theoauth2AllowIdTokenImplicitFlowentry totrue. For example:"oauth2AllowIdTokenImplicitFlow": true,SelectSave.
The web (server) app for CMG is now registered in Microsoft Entra ID.
1. On the API permissions pane, select **Grant admin consent for...**, and then select **Yes**.
In the menu of the app properties, selectManifest. Set theoauth2AllowIdTokenImplicitFlowentry totrue. For example:"oauth2AllowIdTokenImplicitFlow": true,SelectSave.
The native (client) app for CMG is now registered in Microsoft Entra ID. This step also concludes the process in the Azure portal. The role of the Microsoft Entra Global Administrator is done.
Import the apps to Configuration Manager
@@ -1,7 +1,7 @@ --- title: Manually register Microsoft Entra apps description: Manually create the required apps in Microsoft Entra ID to integrate the Configuration Manager site to support the cloud management gateway (CMG).-ms.date: 03/11/2022+ms.date: 08/06/2026 ms.subservice: core-infrastructure ms.topic: how-to ms.collection: tier3@@ -106,14 +106,6 @@ First, you need to make note of the **Microsoft Entra tenant name** and **tenant 1. Select **Add scope** to save. -1. In the menu of the app properties, select **Manifest**. Set the **oauth2AllowIdTokenImplicitFlow** entry to **true**. For example:-- ```json- "oauth2AllowIdTokenImplicitFlow": true,- ```-- Select **Save**.- The web (server) app for CMG is now registered in Microsoft Entra ID. @@ -155,14 +147,6 @@ The web (server) app for CMG is now registered in Microsoft Entra ID. 1. On the API permissions pane, select **Grant admin consent for...**, and then select **Yes**. -1. In the menu of the app properties, select **Manifest**. Set the **oauth2AllowIdTokenImplicitFlow** entry to **true**. For example:-- ```json- "oauth2AllowIdTokenImplicitFlow": true,- ```-- Select **Save**.- The native (client) app for CMG is now registered in Microsoft Entra ID. This step also concludes the process in the Azure portal. The role of the Microsoft Entra Global Administrator is done. ## Import the apps to Configuration Manager