Skip to Content

Setup MS Direct Routing

Last modified by Aaron Blackburn on 2026/09/25 20:58
FirstDigital Fiber · Internet · Cloud · Voice
Microsoft Teams How To’s

Configure Microsoft Direct Routing

This Initial Setup guide will walk you through configuring Direct Routing in The Portal.

Direct Routing is a Microsoft Teams-only offering. To set up Direct Routing, you will complete the following stages:

    1. Get or verify your Microsoft licensing
    2. Validate your tenant and configure Direct Routing
    3. Microsoft iPILOT App Permission Reduction (optional)

1. Get or Verify Your Microsoft Licensing

To complete the automated onboarding process, you'll need 2 Teams Licenses and 2 Teams Phone licenses for each region to be configured.
Important: These licenses must be available and unassigned until your tenant is validated and Direct Routing has been successfully configured.
Example: To configure both North America and Europe, you need a total of 4 available and unassigned licenses: 2 Teams Licenses and 2 Phone System licenses for each region.

2. Validate Your Tenant & Configure Direct Routing

Once licensing is verified, you will install the Microsoft iPILOT App to assist in your tenant's automatic validation and configuration.

  1. Sign in to The Portal using SSO or your credentials. (If this is your first time signing in, complete the quick introduction walkthrough.)
  2. Navigate to Settings > Integration.
    Settings > Integration Menu Navigation
  3. Select MSTEAMS Validate Tenant.
  4. In the Add Registered App Details section, select Click here to activate.
    IMPORTANT: When activating, you must authenticate as a Global Administrator in the tenant where you are configuring Direct Routing.
  5. This will start the installation of the new App. Click Accept to install the App.
    App Permissions Request Consent Screen
  6. The Microsoft iPILOT App requires the Teams Administrator role to validate and configure Direct Routing successfully.

    Go to Azure Active Directory > Roles & Admins and select Roles & Admins. Under Administrative roles, search for Teams Administrator, select its checkbox, and click Add Assignment.

    Search for the iPILOT App, confirm the App ID is 0c88dfb3-a8b1-419d-b6fb-0956cdd5790d, select it, and click Add.

  7. Navigate back to The Portal. You should see the VALIDATED status for each region once successfully configured. You're ready to start assigning users phone numbers and testing services!

3. Microsoft iPILOT App Permission Reduction (Optional)

Permission reduction supports standard security practices.

Important: Only complete this step after you complete sections 1 & 2 of this guide. Reducing permissions beforehand will cause validation, configuration, and testing to fail.
    1. Go to Enterprise Apps in the Microsoft Entra admin center.
    2. Search for the iPILOT App (not the iPILOT SSO App) and select it.
    3. Select Permissions.
    4. Click the three dots menu next to the following permissions and select Revoke Permission:
      • Domain.ReadWrite.All
      • User.ReadWrite.All

Additional Information: MFA & Trusted IP Addresses

If you choose to enable Multi-Factor Authentication (MFA) for your Service Account or have other conditional policies, you must add the following IP addresses to the trusted section in the MFA Service Settings or from your conditional access policies:

North America Europe
204.10.95.128/25 66.178.136.192/27
74.119.9.32/27 66.178.137.192/27
204.10.94.64/27 —
FirstDigital · Microsoft Teams How To’s Need help? Contact your FirstDigital support team at 801-456-1000 or support@firstdigital.com.