This guide is based on https://learn.microsoft.com/en-us/azure/databricks/admin/users-groups/service-principals

Note  - This is something your IT department sets up

Short version

1. Register a new application
2. Create a Secret for the application
3. Write down the Client ID, Tenant ID and Secret
4. Test access according to Use Scripting, Tools or Integration Platforms to access TS Report and Market Data API

Register a new Application

Navigate to the overview and write down the following IDs: 

• Application (client) ID
• Directory (tenant) ID

Create the Secret for the Application

Navigate to Certifices & Secrets => Client Secrets click New Client Secret

Choose a name and an expiration date, then copy the value 

Test the Application with the Secret

Please see examples in Use Tools, Scripting or Integration Platforms to access TS Report and Market Data API

Troubleshooting

When acquiring the token, you might get an error “AADSTS501051 _invalid_client: AADSTS501051: Application \<application name\> isn't assigned to a role for the \<web API\>”. This happens if you have chosen to limit access to Treasury Systems SaaS under “Enterprise Applications” in Entra ID.
If this happens, you must either remove the assignment required or explicitly grant the registered application access to Treasury Systems SaaS.
The latter requires scripting since it is not available in the UI, at the time of writing. [DS4] For instructions, see https://learn.microsoft.com/en-us/entra/identity/enterprise-apps/assign-user-or-group-access-portal?pivots=aad-powershell