Skip Navigation

Obtain an
Entra
app ID for
BEMS
with certificate-based authentication

If you need to obtain multiple
Entra
app IDs (for example,
Docs
and
BlackBerry Work
), it is recommended that you create a separate app ID for each app.
  1. In the left column, click
    Applications > App registrations
    .
  2. Click
    New registration
    .
  3. In the
    Name
    field, enter a name for the app.
  4. Select a supported account type.
  5. Click
    Register
    . The new registered app appears.
  6. In the
    Manage
    section, click
    API permissions
    .
  7. Click
    Add a permission
    .
  8. In the
    Select an API
    section, click
    APIs my organization uses
    .
  9. Search for and click
    Office 365 Exchange Online
    .
  10. Click
    Application permission
    and select the
    full_access_as_app
    (Use Exchange Web Service with full access to all mailboxes) permission.
  11. Click
    Add permissions
    .
  12. In the
    Configured permissions
    section, click
    Microsoft Graph
    .
  13. Click
    Application permissions
    and select the following permissions:
    • Contacts.ReadWrite
      (Have full access to user contacts)
    • Mail.Read
      (Read user mail)
    • User.Read.All
      (Read all users' full profiles)
  14. Click
    Add permissions
    .
  15. Click
    Grant admin consent
    .
  16. Click
    Yes
    .
  17. Click
    Overview
    to view the app that you created in step 5. Copy the
    Application (client) ID
    . The Application (client) ID is displayed in the main
    Overview
    page for the specified app. This is used as the
    Client application ID
    in the
    BEMS
    dashboard when you enable modern authentication and configure
    BEMS
    to communicate with
    Microsoft Exchange Online
    .