Obtain an Entra app ID for BlackBerry Work

If you are configuring Office 365 settings in the app configuration for BlackBerry Work, you may need to obtain and copy the Entra app ID for BlackBerry Work. If you need to obtain multiple Entra app IDs (for example, BEMS-Mail and BEMS-Docs), it is recommended that you create a separate app ID for each app.
  1. Sign in to entra.microsoft.com.
  2. In the left column, click Applications > App registrations.
  3. Click New registration.
  4. In the Name field, enter a name for the BlackBerry Work app. This is the name that users will see.
  5. Select a supported account type. Although Multitenant is supported, in most cases this should be Single tenant.
  6. In the Redirect URI drop-down list, select Public client (mobile & desktop) and enter: com.blackberry.work://connect/o365/redirect
  7. Click Register.
  8. Optionally, if you are enabling Entra ID conditional access, perform the following actions:
    • Click on the Redirect URIs link (i.e. '0 web, 0 spa, 1 public client').
    • For iOS devices, under the existing Mobile and desktop applications section, click Add URI and enter: 
      x-msauth-work://com.good.gcs.g3
    • For Android devices:
      1. Click Add a platform > Android.
      2. In the Package name field, enter: 
        com.good.gcs
      3. In the Signature hash field, enter: 
        zRsXTl1cL/Seb6GumLzvoecPA8w=
      4. Click Configure.
  9. In the left column, in the Manage section, click API permissions.
  10. Click Add a permission.
  11. In the Select an API section, click the Microsoft APIs tab.
  12. Complete one or more of the following tasks:
    EnvironmentPermissions

    If your environment is configured to use Microsoft 365
    1. Click Microsoft Graph. If Microsoft Graph is not listed, add Microsoft Graph.
    2. In delegated permissions, select the following permissions:
      • Sign in and read user profile checkbox (User > User.Read)
      • Send mail as a user checkbox (Mail > Mail.Send)
      • Access mailboxes as the signed-in user via Exchange Web Services checkbox (EWS > EWS.AccessAsUser.All).
      • Have full access to user calendars checkbox (Calendars > Calendars.ReadWrite)
      • Read presence information of all users in your organization checkbox (Presence > Presence.Read.All)
    3. Click one of the following:
      • If Microsoft Graph existed in the API permissions, click Update permissions.
      • If you needed to add Microsoft Graph, click Create.
    4. Click Add permissions.

    If your environment is configured to use Microsoft SharePoint Online or Entra-IP to enable modern authentication for the BlackBerry Work client
    1. Click the APIs my organization uses tab.
    2. Search for and click the BEMS app that you created in Obtain an Azure app ID for the BEMS-Docs component service. For example, AzureAppIDforBEMS.
    3. Select all delegated permissions.
      1. Click Delegated permissions.
      2. Click expand all. Make sure that all options are selected.
    4. Click Add permissions.
  13. Click Grant admin consent for <Organization name> to apply the permissions for the app. These settings will not be applied to the app until you have granted the updated permissions.
  14. Click Yes.
  15. You can now copy the Application ID for the app that you created. In the Manage section, click Overview. It is located under the name of the app, in the Application (client) ID field. You use the Application ID in the app configuration settings for BlackBerry Work. For more information about the app configuration, see BlackBerry Work app configuration settings.