Microsoft Planner is Microsoft 365's task and work-management app for teams. Integrating Microsoft Planner with Frontegg lets your application read and manage plans, buckets, and tasks on behalf of your users — all through Frontegg's integration layer, backed by Microsoft Graph. Microsoft Planner authenticates with OAuth 2.0 (Authorization Code flow) via Microsoft Entra, so you register an app in the Microsoft Entra admin center to obtain a Client ID and Client Secret.
Prerequisites
Prerequisites
- A Microsoft 365 account with Microsoft Planner, and access to the Microsoft Entra admin center
- Permission to register applications in your Microsoft Entra directory (and, for organization-wide use, to grant admin consent)
You register an application in Microsoft Entra. The app provides the Application (client) ID and a Client Secret, and defines the redirect URI that Microsoft returns users to after they authorize access. For single-tenant apps you also provide your Directory (tenant) ID.
Sign in to the Microsoft Entra admin center and go to Entra ID → App registrations. Click New registration, enter a name (for example Frontegg Integration), choose the supported account types that match your use case, and click Register.
On the app's Overview page, copy the Application (client) ID — this is your Client ID. If your app is single-tenant, also copy the Directory (tenant) ID. For multi-tenant apps, you can leave the tenant ID as common in Frontegg.
Open Authentication, add a Web platform (if not already present), and set the redirect URI to your Frontegg Redirect URL: https://YOUR_MCP_GATEWAY_URL/integration-callback
Open Certificates & secrets → Client secrets and click New client secret. Add a description and an expiry, then click Add. Copy the secret Value immediately.
Copy your Client Secret now
Copy your Client Secret now
The secret Value is shown only once, right after you create it — Entra masks it afterward and shows only the Secret ID. Copy it immediately and store it securely; treat it like a password. If you lose it, create a new client secret.
Open API permissions. Frontegg requests the Microsoft Graph delegated permissions it needs during authorization, but for organization-wide use an administrator may need to click Grant admin consent so users are not prompted individually. Use Add a permission → Microsoft Graph → Delegated permissions if you want to pre-configure them.
Once you have your Client ID and Client Secret, configure the integration in the Frontegg portal:
- Open the Frontegg portal and navigate to [ENVIRONMENT] → Integrations → Microsoft Planner.
- Enter the Client ID (Application (client) ID) and the Client Secret.
- Enter your Directory (tenant) ID for a single-tenant app, or leave it as
commonfor a multi-tenant app. - Click Save.
Keep your credentials secure
Keep your credentials secure
Never share or commit your Client Secret to version control.
Frontegg requests the following Microsoft Graph delegated permissions, plus the OIDC basics (openid, profile, email) and offline_access for refresh tokens:
| Scope | Description |
|---|---|
User.Read | Sign in and read the user's basic profile |
Tasks.Read | Read the user's Planner plans, buckets, and tasks |
Tasks.ReadWrite | Create and update the user's Planner plans, buckets, and tasks |