How-To Register the EZCA App in your Azure Tenant

Learn how to register the EZCA application in your Azure tenant to enable seamless integration with Entra ID and other Microsoft services.

Registering the Application

EZCA uses two Entra ID Applications to authenticate you to our services. To register the Keytos application in your tenant, use your Global Administrator account and go to the following URL and press Accept:

Register Application

Alternately, you can copy & paste the following URL into your browser:

https://login.microsoftonline.com/common/oauth2/authorize?client_id=eddb4ead-89dd-4da8-9196-09c7ea82d724&prompt=admin_consent&response_type=code&redirect_uri=https%3A%2F%2Fportal.ezca.io%2FWelcome

Consent Page

Once this step is done, you are ready to start the sign up process. You can create your free trial through EZCA or as an Azure Resource (Note: Unfortunately we cannot offer the free trial if the service is created as an Azure Resource).

Verify Application Registration - App Not Being Registered

You can validate that the 2 applications (3 if you are using EZCA for Intune) are registered in your tenant by going to the Azure Portal -> Entra ID -> Enterprise Applications and search for Keytos and you should see the “Keytos” and “Keytos Client” applications (and “Keytos Intune App” if you are using EZCA for Intune): Cloud PKI Applications in Azure Portal

Registering the EZCA Application if You are Using Your Account in Multiple Tenants

In the case that you are using your account in multiple tenants and Azure is not selecting the correct tenant to register the application under you can use the following link (where $yourorganization$ is the name of your organization) to register the application in the correct tenant:

https://login.microsoftonline.com/$yourorganization$.onmicrosoft.com/oauth2/v2.0/authorize?client_id=eddb4ead-89dd-4da8-9196-09c7ea82d724&response_type=code&redirect_uri=https%3A%2F%2Fportal.ezca.io%2FWelcome&scope=openid