Skip Navigation
  1. BlackBerry Docs
  2. Configuring Office 365 Modern Authentication for BlackBerry Dynamics Apps
  3. Troubleshooting
  4. Steps to migrate existing on-premises users to Microsoft Outlook Online using modern authentication

Steps to migrate existing on-premises users to 
Microsoft Outlook
 Online using modern authentication

Step
Action
The One icon
The Two icon
Create, edit, or copy an existing 
BlackBerry Dynamics
 Connectivity profile for the migrating users. Include the following information:
  • If the authentication server and 
    Microsoft Exchange Online
     must be accessed through the internal network, add the appropriate hosts to the Additional servers section.
    Common 
    Microsoft Exchange Online
     (
    Microsoft Office 365
    ) hosts include the following:
    • aadcdn.msauth.net
    • Microsoft's Content Distribution servers (for example, aad.cdn.mstauth.net) 
    • login.microsoftonline.com
    Common Microsoft Exchange Online hosts:
    • autodiscover-s.outlook.com 
    • outlook.office365.com
  • If the authentication and 
    Microsoft Exchange Online
     can be accessed using the Internet, you can improve performance by specifying “Direct” when you add the authentication server and 
    Microsoft Office 365
     servers to the Additional servers list. 
    Note:
     If your Default route is set to Direct, this is not required. 
For more information on how to configure the 
BlackBerry Dynamics
 for 
Microsoft Exchange Online
 and modern authentication, visit support.blackberry.com/community to read article 64405.
The Three icon
Create a new 
BlackBerry Work
 app configuration with the modern authentication settings. The new app configuration must include the following:
  • Same settings as the original app configuration as well as the modern authentication settings
  • Select the "Enable Flow Enabled" checkbox and set the expiration date to allow users to send and receive email messages during the migration. 
  • If your environment doesn't use Autodiscover, specify the ActiveSync Server and Exchange Web services URL endpoint fields.
  • If your environment is configured for 
    Kerberos
     Constrained delegation or uses certificate-based authentication for the on-premises 
    Microsoft Exchange Server
     , but not for the modern authentication endpoint, clear the Security settings "Use Kerberos Constrained Delegation in place of login/password" and "Use client certificate in place of login/password" checkboxes or users are prompted for credentials.
The four icon
Assign the app configuration with the correct modern authentication settings to users. For instructions, see the content for your app:
The five icon
Migrate user mailboxes from your on-premises 
Microsoft Exchange
 server to 
Microsoft Exchange Online
. 
After the migration completes, users receive a prompt to log in to their mailboxes. Wait while the 
BlackBerry Dynamics
 apps trigger autodiscover and connect to the new mailbox location. The amount of time this takes depends on how many users have been migrated and how often 
BlackBerry Work
 is opened. Refer to the Last Contact Time and container activity report to estimate whether users have received the new mailbox configuration from autodiscover.