Skip Navigation
  1. BlackBerry Docs
  2. Configuring Office 365 Modern Authentication for BlackBerry Dynamics Apps
  3. Enabling modern authentication for the Mail service in BEMS
  4. Configure BEMS to communicate with a Microsoft Office 365 environment using Microsoft Graph API
  5. Obtain an Entra app ID for BEMS with client secret authentication

Obtain an
Entra
 app ID for
BEMS
 with client secret authentication

  1. Sign in to portal.azure.com.
  2. In the left column, click
    Microsoft Entra ID
    .
  3. Click
    App registrations
    .
  4. Click
    New registration
    .
  5. In the
    Name
     field, enter a name for the app.
  6. Select a supported account type.
  7. If you use passive authentication for users to authenticate to the identity provider (IDP), in the
    Redirect URI
     drop-down list, select
    Public/client (mobile & desktop)
     and enter
    https://localhost:8443
    . The Redirect URI is the URL that the user is redirected to after they successfully authenticate to the IDP.
    Important
    : Make sure that the Redirect URL matches the URL to the dashboard or authentication might not work as expected.
  8. Click
    Register
    . The new registered app appears.
  9. In the
    Manage
     section, click
    API permissions
    .
  10. Click
    Add a permission
    .
  11. Click
    Microsoft Graph
    .
  12. Click
    Application permissions
     and set the following permissions:
    • Read mail in all mailboxes (
      Mail > Mail.Read
      )
    • Read all user's full profile (
      User > User.Read.All
      )
    • Read and write contacts in all mailboxes (
      Contacts > Contacts.ReadWrite
      )
      *
      *
       This permission is only required if you require the Contact Service API to use third-party apps to query, retrieve, create, and update contact information from a user’s contact folder. For more information on the
      BEMS
       Contact Service API, see Contact Service API reference content.
  13. Click
    Update permissions
    .
  14. Click
    Grant admin consent
    . Click
    Yes
    .
  15. Add a client secret.
    1. In the
      Manage
       section, click
      Certificates & secrets
      .
    2. Click
      New client secret
      .
    3. In the
      Description
       field, enter a key description up to a maximum of 16 characters including spaces.
    4. Set an expiration date (for example, 3 months, 12 months, custom).
    5. Click
      Add
      .
    6. Copy the key
      Value
      .
      The Value is available only when you create it. You cannot access it after you leave the page. This is used as the
      Client secret
       in the
      BEMS
       Dashboard when you enable
      Microsoft Office 365
       and configure
      BEMS
       to communicate with
      Microsoft Office 365
      .