Skip Navigation

Obtain an
Azure
app ID for
BEMS
with client secret authentication

  1. Sign in to portal.azure.com.
  2. In the left column, click
    Azure Active Directory
    .
  3. Click
    App registrations
    .
  4. Click
    New registration
    .
  5. In the
    Name
    field, enter a name for the app.
  6. Select a supported account type.
  7. Optionally, in the
    Redirect URI
    section, in the drop-down list, select
    Public/client (mobile & desktop)
    and enter
    https://localhost:8443
    .
  8. Click
    Register
    . The new registered app appears.
  9. In the
    Manage
    section, click
    API permissions
    .
  10. Click
    Add a permission
    .
  11. Click
    Microsoft Graph
    .
  12. Set the following Application permissions for
    Microsoft Graph
    .
    • Read and write contacts in all mailboxes (
      Contacts > Contacts.ReadWrite
      )
    • Read mail in all mailboxes (
      Mail > Mail.Read
      )
    • Read all user's full profile (
      User > User.Read.All
      )
  13. Click
    Update permissions
    .
  14. Click
    Grant admin consent
    . Click
    Yes
    .
  15. Add a client secret.
    1. In the
      Manage
      section, click
      Certificates & secrets
      .
    2. Click
      New client secret
      .
    3. In the
      Description
      field, enter a key description up to a maximum of 16 characters including spaces.
    4. Set an expiration date (for example, 3 months, 12 months, custom).
    5. Click
      Add
      .
    6. Copy the key
      Value
      .
      The Value is available only when you create it. You cannot access it after you leave the page. This is used as the
      Client secret
      in the
      BEMS
      Dashboard when you enable
      Microsoft Office 365
      and configure
      BEMS
      to communicate with
      Microsoft Office 365
      .