Configure

BlackBerry Work

for

iOS

and

Android

app settings for

Office 365

modern authentication

Optionally, select the

Use Office 365 Modern Authentication

option to use modern authentication instead of basic authentication. Modern authentication enables

BlackBerry Work

to use sign-in features such as multi-factor authentication, SAML-based third-party identity providers, and smart card and certificate-based authentication. This option overrides autodiscover and provisions

BlackBerry Work

to use outlook.office365.com for mail settings. If this is not required in your environment, do not enable this option and manually configure your ActiveSync endpoint in the BlackBerry Work app configuration settings on the Basic Configuration tab. For more information, see the BlackBerry Work app configuration settings.

In the

Azure App ID

field, specify the

Microsoft Entra ID

app ID for

BlackBerry Work

. For information on how to obtain an

Entra

ID, see Obtain an Entra app ID for BlackBerry Work

In the

Office 365 Sign On URL

field, specify the web address that

BlackBerry Work

should use when signing in to

Office 365

. If you do not specify a value,

BlackBerry Work

will use https://login.microsoftonline.com during setup. In most configurations, this field should be left blank.

In the

Office 365 Tenant ID

field, specify the tenant ID of the

Office 365

server that you want

BlackBerry Work

to connect to during setup.

In the

Office 365 Resource

field, specify the URL of the

Microsoft Exchange Online

server. In the

Redirect URI

field, specify the URI that you entered in the

Microsoft Entra ID

portal. In most configurations, this field should be left blank.

Select the

Use Office 365 Modern Authentication for Presence

option to use modern authentication with the presence service. The

Enable presence service

option on the Apps Settings tab must also be selected.

Optionally, select the

Proxy Office 365 Modern Authentication requests (Android only)

setting to force all

Office 365

modern authentication requests to go through the

BlackBerry Proxy

instead of connecting directly to the Internet. This setting should be enabled if your organization's authentication server is not published externally to the internet. If your authentication server is published externally, this setting is optional.