Skip Navigation
  1. BlackBerry Docs
  2. BlackBerry Work 2.18
  3. BlackBerry Work, Notes, and Tasks Administration Guide for BlackBerry UEM
  4. Obtain an Azure app ID for the Connect, Presence, and Docs service

Obtain an 
Azure
 app ID for the 
Connect
, 
Presence
, and 
Docs
 service

When your environment is configured for 
Skype for Business Online
, 
Microsoft SharePoint Online
 or 
Microsoft Azure
-IP you must register the 
BEMS
 component services in 
Azure
. You can register one or more of the services in Azure. In this task, the 
Connect
, 
Presence
, and 
Docs
 services and 
Microsoft Azure
-IP are registered in Azure.
If you configure the 
Connect
 service, you can enable the conversation history to allow users to access conversations that are saved in the Conversation History folder of the user's 
Microsoft Exchange
 mailbox. Saving the conversation history is supported in the following environments:
  • Users in a 
    Skype for Business
     on-premises that have mailboxes on an on-premises 
    Microsoft Exchange Server
  • Users in a 
    Skype for Business Online
     environment that have mailboxes on an on-premises 
    Microsoft Exchange Server
  • Users in a 
    Skype for Business Online
     environment that have mailboxes on 
    Microsoft Office 365
Saving the conversation history is not supported in an on-premises 
Skype for Business
 environment where users have mailboxes on 
Microsoft Office 365
. 
  1. Log on to portal.azure.com.
  2. In the left column, click 
    Azure Active Directory
    .
  3. Click 
    App registrations
    .
  4. Click 
    New registration
    .
  5. In the 
    Name
     field, enter a name for the app. For example, AzureAppIDforBEMS.
  6.  Select a supported account type.
  7. In the 
    Redirect URI
     drop-down list, select 
    Web
    , and enter 
    https://localhost:8443
    .
  8. Press 
    Register
    .
  9. In the 
    Manage
     section, click 
    API permissions
    .
  10. Click 
    Add a permission
    . 
  11. In the 
    Select an API
     section. click 
    APIs my organization uses
    . 
  12. Search for and click 
    Microsoft Information Protection Sync Service
    .
    1. Select the 
      UnifiedPolicy.User.Read
       checkbox.
    2. Click 
      Add permissions
      . 
  13. Click 
    Add a permission
    .
  14. Complete one or more of the following tasks:
    Service
    Permissions
    If you configure 
    Connect
     to use 
    Skype for Business Online
    1. Search for and click 
      Skype for Business Online
      . 
    2. Set the following permissions:
      • Application permissions: All
        1. Click 
          Application permissions
          . 
        2. Click 
          expand all
          . Make sure that all options are selected.
      • Delegated permissions: All
        1. Click 
          Delegated permissions
          . 
        2. Click 
          expand all
          . Make sure that all options are selected.
    3. Click 
      Add permissions
      .
    4. If you enable saving the conversation history, complete the following steps:
      1. On the 
        API permissions
         page, click 
        Add a permission
        .
      2. In the 
        Select an API
         section, click 
        APIs my organization uses
        .  
      3. In the search field, enter 
        Office 365 Exchange Online
        . 
      4. Expand 
        EWS permission
        . Select the 
        EWA.AccessAsUse.all
         check box. This option allows the 
        BlackBerry Work
         app to have the same access to mailboxes as the signed-in user through 
        Microsoft Exchange Web Services
        .  
      5. Click 
        Add permissions
        .
    If you configure 
    Presence
     to use 
    Skype for Business Online
    1. Search for and click 
      Skype for Business Online
      . 
    2. Set the following permissions:
      • Application permissions: All
        1. Click 
          Application permissions
          . 
        2. Click 
          expand all
          . Make sure that all options are selected.
      • Delegated permissions: All
        1. Click 
          Delegated permissions
          . 
        2. Click 
          expand all
          . Make sure that all options are selected.
    3. Click 
      Add permissions
      .
    If you configure 
    Docs
     to use 
    Microsoft SharePoint Online
    1. Search for and click 
      Office 365 SharePoint Online
      .
    2. Set the following permissions:
      • Application permissions: None
        1. Click 
          Application permissions
          . 
        2. Click 
          expand all
          . Make sure that all options are cleared.
      • Delegated permissions
        1. Click 
          Delegated permissions
          . 
        2. Expand 
          AllSites
          . 
        3. Select the 
          Site.Manage.All
           checkbox. This option will all the app to read, write, update, and delete documents in all site collections without a signed in user. 
    3. Click 
      Add permissions
      .
    If you use 
    Microsoft Azure
    -IP
    1. Click 
      Microsoft Graph
      .
    2. Set the following permissions:
      • Application permissions
        1. Click 
          Application permissions
          . 
        2. Expand 
          Directory
          . 
        3. Select the 
          Directory.Read.All
           checkbox. This option lets the app read the data in the organization's directory.
      • Delegated permissions
        1. Click 
          Delegated permissions
          . 
        2. Expand 
          Directory
          . 
        3. Select the 
          Directory.Read.All
           checkbox. This option lets the app read the data in the organization's directory.
    3. Click 
      Add permissions
      .
  15. Click 
    Grant admin consent for <
    organizational directory name
    >
    . Click 
    Yes
    .
    This step requires tenant administrator privileges. 
  16. To allow autodiscovery to function as expected, set the authentication permissions.
    1. In the 
      Manage
       section, click 
      Authentication
      .
    2. Under the 
      Implicit grant
       section, select the 
      ID Tokens
       checkbox.
    3. In the 
      Default client type
      , select 
      No
      . 
    4. Click 
      Save
      . 
  17. In the 
    Manage
     section, click 
    Expose an API
    . Complete the following tasks.
    Task
    Steps
    Add a scope
    The scope restricts access to data and functionality protected by the API.
    1. Click 
      Add a scope
      . 
    2. Click 
      Save and continue
      .
    3. Complete the following fields and settings:
      • Scope name: Provide a unique name for the scope. 
      • Who can consent: Click 
        Admins and user
        .
      • Admin consent display name: Enter a descriptive name. 
      • Admin consent description: Enter a description for the scope.
      • State: Click 
        Enabled
        . By default, the state is enabled.   
    Add a client application 
    Authorizing a client application indicates that that API trusts the application and users shouldn't be prompted for consent.
    1. Click 
      Add a client application
      . 
    2. In the Client ID field, enter the client ID that you obtained. For instructions, see  Obtain an Azure app ID for the Connect, Presence, and Docs service.
    3. Select the 
      Authorized scopes
       checkbox.
    4. Click 
      Add application
      .  
  18. In the 
    Manage
     section, click 
    Certificates & secrets
     and add a client secret. 
    1. Click 
      New client secret
      .
    2. In the 
      Description
       field, enter a key description up to a maximum of 16 characters including spaces. 
    3. Set an expiration date (for example, In 1 year, In 2 years, Never expires).  
    4. Click 
      Add
      .
    5. Copy the key 
      Value
      . 
      The Value is available only when you create it. You cannot access it after you leave the page. This is used as the 
      BlackBerry BEMS Connect/Presence Service App Key
       value in the 
      Connect
       and 
      Presence
       services and 
      Application Key
       in the 
      Docs
       service in the 
      BEMS
       Dashboard. 
  19. Copy the 
    Application (client) ID
    . The Application (client) ID is displayed in the main 
     Overview
     page for the specified app. This is used as the following in the 
    BEMS
     dashboard:
    • BlackBerry BEMS Connect/Presence Service App ID
       value the 
      BEMS
       dashboard for the 
      BlackBerry Connect
       service
    • BlackBerry BEMS Connect/Presence Service App ID
       value for the 
      Presence
       service
    • BEMS Service Azure Application ID
       value for the 
      Docs
       > Settings service