Skip Navigation
  1. BlackBerry Docs
  2. Configuring Office 365 Modern Authentication for BlackBerry Dynamics Apps
  3. Configure BlackBerry Work for iOS and Android app settings for Office 365 modern authentication
  4. Obtain an Entra app ID for BlackBerry Work

Obtain an
Entra
 app ID for
BlackBerry Work

If you are configuring
Office 365
 settings in the app configuration for
BlackBerry Work
, you may need to obtain and copy the
Entra
 app ID for
BlackBerry Work
.  If you need to obtain multiple
Entra
 app IDs (for example,
BEMS-Mail
 and
BEMS-Docs
), it is recommended that you create a separate app ID for each app.
  2. In the left column, click
    Applications > App registrations
    .
  3. Click
    New registration
    .
  4. In the
    Name
     field, enter a name for the
    BlackBerry Work
     app. This is the name that users will see.
  5. Select a supported account type. Although Multitenant is supported, in most cases this should be Single tenant.
  6. In the
    Redirect URI
     drop-down list, select
    Public client (mobile & desktop)
     and enter:
    com.blackberry.work://connect/o365/redirect
  7. Click
    Register
    .
  8. Optionally, if you are enabling
    Entra ID
     conditional access, perform the following actions:
    • Click on the
      Redirect URIs
       link (i.e. '0 web, 0 spa, 1 public client').
    • For
      iOS
       devices, under the existing
      Mobile and desktop applications
       section, click
      Add URI
       and enter: 
      x-msauth-work://com.good.gcs.g3
    • For
      Android
       devices:
      1. Click
        Add a platform > Android
        .
      2. In the
        Package name
         field, enter: 
        com.good.gcs
      3. In the
        Signature hash
         field, enter: 
        zRsXTl1cL/Seb6GumLzvoecPA8w=
      4. Click
        Configure
        .
  9. In the left column, in the
    Manage
     section, click
    API permissions
    .
  10. Click
    Add a permission
    .
  11. In the
    Select an API
     section, click the
    Microsoft APIs
     tab.
  12. Complete one or more of the following tasks:
    Environment
    Permissions
    If your environment is configured to use
    Microsoft 365
    1. Click
      Microsoft Graph
      . If
      Microsoft Graph
       is not listed, add
      Microsoft Graph
      .
    2. In delegated permissions, select the following permissions:
      • Sign in and read user profile
         checkbox (
        User > User.Read
        )
      • Send mail as a user
         checkbox (
        Mail > Mail.Send
        )
      • Access mailboxes as the signed-in user via Exchange Web Services
         checkbox (
        EWS > EWS.AccessAsUser.All
        ).
      • Have full access to user calendars
         checkbox (
        Calendars > Calendars.ReadWrite
        )
      • Read and write a user's presence information
         checkbox (
        Presence > Presence.Read.All
        )
    3. Click one of the following:
      • If
        Microsoft Graph
         existed in the API permissions, click
        Update permissions
        .
      • If you needed to add
        Microsoft Graph
        , click
        Create
        .
    4. Click
      Add permissions
      .
    If your environment is configured to use
    Microsoft SharePoint Online
     or
    Entra
    -IP to enable modern authentication for the
    BlackBerry Work
     client
    1. Click the
      APIs my organization uses
       tab.
    2. Search for and click the
      BEMS
       app that you created in Obtain an Azure app ID for the BEMS-Docs component service. For example, AzureAppIDforBEMS.
    3. Select all delegated permissions.
      1. Click
        Delegated permissions
        .
      2. Click
        expand all
        . Make sure that all options are selected.
    4. Click
      Add permissions
      .
  13. Click
    Grant admin consent for <Organization name>
     to apply the permissions for the app. These settings will not be applied to the app until you have granted the updated permissions.
  14. Click
    Yes
    .
  15. You can now copy the Application ID for the app that you created. In the
    Manage
     section, click
    Overview
    . It is located under the name of the app, in the Application (client) ID field. You use the Application ID in the app configuration settings for BlackBerry Work. For more information about the app configuration, see BlackBerry Work app configuration settings.