Skip Navigation
  1. BlackBerry Docs
  2. BlackBerry Work 3.2
  3. Configuring Office 365 Modern Authentication for BlackBerry Dynamics Apps
  4. Enable modern authentication for the Mail service in BEMS
  5. Obtain an Azure app ID for BEMS with credential or passive authentication

Obtain an 
Azure
 app ID for 
BEMS
 with credential or passive authentication

If you need to obtain multiple 
Azure
 app IDs (for example, 
Docs
, 
BlackBerry Work
, and 
BlackBerry Connect
), it is recommended that you create a separate app ID for each app.
  1. Sign in to portal.azure.com.
  2. In the left column, click 
    Azure Active Directory
    .
  3. Click 
    App registrations
    .
  4. Click 
    New registration
    .
  5. In the 
    Name
     field, enter a name for the app.
  6. Select a supported account type. 
  7. In the 
    Redirect URI
     section, in the drop-down list, select 
    Web
     and enter 
    https://localhost:8443
  8. Click 
    Register
    . The new registered app appears.
  9. In the 
    Manage
     section, click 
    API permissions
    .
  10. Click 
    Add a permission
    .
  11. In the 
    Select an API
     section, click 
    Microsoft APIs
     tab. 
  12. Click 
    Exchange
    .
  13. Set the following permissions for 
    Microsoft Exchange Web Services
    :
    • Delegated permissions: Access mailboxes as the signed-in user via Exchange Web Services (
      EWS > EWS.AccessAsUser.All
      )
  14. Select the 
    Add permissions
    . 
  15. Click 
    Add a permission
    . 
  16. Click 
    Microsoft Graph
    . If the 
    Microsoft Graph
     API permission is not listed, add 
    Microsoft Graph
    . 
  17. Set the following permissions for 
    Microsoft Graph
    . 
    • Delegated permissions: Sign in and read user profile (
      User > User.Read
      ).
  18. Click one of the following: 
    • If the 
      Microsoft Graph
       API permission existed in the API permissions list, click 
      Update permissions
      .
    • If you needed to add the 
      Microsoft Graph
       API permission, click 
      Create
      .  
  19. Click 
    Add a permissions
    .
  20. Click 
    Grant admin consent
    . Click 
    Yes
    .
    This step requires tenant administrator privileges. 
  21. To allow autodiscovery to function as expected, set the authentication permissions.
    1. In the 
      Manage
       section, click 
      Authentication
      . 
    2. Under the 
      Implicit grant
       section, select the 
      ID Tokens
       checkbox.
    3. In the 
      Default client type
      , select 
      Yes
      . 
    4. Click 
      Save
      . 
  22. Click 
    Overview
    . Copy the 
    Application (client) ID
    . The Application (client) ID is displayed in the main 
    Overview
     page for the specified app. This is used as the 
    Client application ID
     when you enable modern authentication and configure 
    BEMS
     to communicate with 
    Microsoft Office 365
    .