Add an Entra app and obtain its Entra details for configuring modern authentication

If you want to configure BlackBerry UEM to connect to Microsoft 365 using modern authentication, you will need to provide two app details: Application ID and Organization. When you perform these steps, the Entra app ID displays in the Select members(s) section. The Entra organization information displays on the Microsoft Entra ID page as a property of the directory. Record these two entries for use when you configure UEM for modern authentication in the gatekeeping profile.

  1. Sign in to entra.microsoft.com.
  2. Click Applications > App registrations > New registration.
  3. In the Name field, enter a name for the app.
  4. Click Register.
  5. Click API permissions > Add a permission.
  6. Find the Exchange or Office 365 Exchange Online permissions group.
  7. Click Application permissions > Exchange.ManageAsApp > Add permission.
  8. To grant the administrator consent, select Exchange.ManageAsApp > Grant admin consent.
  9. In the Manage section, click Certificates & secrets > Upload certificate and select the public key (cert.pem).
  10. To assign a role to the app, click Show more > Roles and admins.
  11. In the Administrative roles section, type "Exchange" to view the supported roles for Microsoft Exchange.
  12. Click on a role to view the role details.
  13. Click Add assignments.
  14. Under Select member(s), click No member selected.
  15. Search for the Entra app ID by app ID or app name.
  16. Select the app to move it to the Selected items section.
  17. Click Select.
  18. Click Next.
  19. On the Add assignments page, ensure that the Assignment type is set to Active. For more information about assignment types, refer to the information from Microsoft.
  20. Click Assign.
Associate a certificate with the Entra app ID of UEM for modern authentication