Skip Navigation

Obtain an
Azure
app ID for
BlackBerry Work

If you are configuring
Office 365
settings in the app configuration for
BlackBerry Work
, you may need to obtain and copy the
Azure
app ID for
BlackBerry Work
.  If you need to obtain multiple
Azure
app IDs (for example,
Docs
,
BEMS
, and
BlackBerry Connect
), it is recommended that you create a separate app ID for each app.
  1. Log on to portal.azure.com.
  2. In the left column, click
    Azure Active Directory
    .
  3. Click
    App registrations
    .
  4. Click
    New registration
    .
  5. In the
    Name
    field, enter a name for the app. This is the name that users will see.
  6. Select a supported account type.
  7. In the
    Redirect URI
    drop-down list, select
    Public client (mobile & desktop)
    and enter
    com.blackberry.work://connect/o365/redirect
  8. Click
    Register
    .
  9. In the
    Manage
    section, click
    API permissions
    .
  10. Click
    Add a permission
    .
  11. In the
    Select an API
    section, click the
    Microsoft APIs
    tab.
  12. Complete one or more of the following tasks:
    Environment
    Permissions
    If your environment is configured to use
    Microsoft Office 365
    1. Click
      Microsoft Graph
      . If
      Microsoft Graph
      is not listed, add
      Microsoft Graph
      .
    2. Set the following permissions:
      • In delegated permissions, select the following permissions:
        • Sign in and read user profile
          checkbox (
          User > User.Read
          )
        • Send mail as a user
          checkbox (
          Mail > Mail.Send
          )
    3. Click one of the following:
      • If
        Microsoft Graph
        existed in the API permissions, click
        Update permissions
        .
      • If you needed to add
        Microsoft Graph
        , click
        Create
        .
    4. Click
      Add permissions
      .
    If your environment is configured to use
    Microsoft Exchange Online
    for email
    1. Click the
      Microsoft Graph
      .
    2. Set the following permissions:
      • In delegated permissions, select
        Access mailboxes as the signed-in user via Exchange Web Services
        checkbox (
        EWS > EWS.AccessAsUser.All
        ).
    3. Click
      Add permissions
      .
    If your environment is configured for
    Microsoft Exchange Online
    and uses
    Skype for Business Online
    for meetings
    1. Click
      Skype for Business
      .
    2. Select all delegated permissions.
      1. Click
        Delegated permissions
        .
      2. Click
        expand all
        . Make sure that all options are selected.
    3. Click
      Add permissions
      .
    If your environment is configured to use
    Microsoft SharePoint Online
    or
    Azure
    -IP to enable modern authentication for the
    BlackBerry Work
    client
    1. Click the
      APIs my organization uses
      tab.
    2. Search for and click the
      BEMS
      app that you created in Obtain an Azure app ID for the BEMS-Connect, BEMS-Presence, and BEMS-Docs component service. For example, AzureAppIDforBEMS.
    3. Select all delegated permissions.
      1. Click
        Delegated permissions
        .
      2. Click
        expand all
        . Make sure that all options are selected.
    4. Click
      Add permissions
      .
  13. Click
    Grant admin consent for <Organization name>
    to apply the permissions for the app. These settings will not be applied to the app until you have granted the updated permissions.
  14. Click
    Yes
    .
  15. You can now copy the Application ID for the app that you created. In the
    Manage
    section, click
    Overview
    . It is located under the name of the app, in the Application (client) ID field.