Configure 

BlackBerry Work

 for 

iOS

 and 

Android

 app settings for 

Office 365

 modern authentication

Optionally, select the 

Use Office 365 Modern Authentication

 option to use modern authentication instead of basic authentication. Modern authentication enables 

BlackBerry Work

 to use sign-in features such as multi-factor authentication, SAML-based third-party identity providers, and smart card and certificate-based authentication. This option overrides autodiscover and provisions 

BlackBerry Work

 to use outlook.office365.com for mail settings. If this is not required in your environment, do not enable this option and manually configure your ActiveSync endpoint in the BlackBerry Work app configuration settings  on the Basic Configuration tab. For more information, see the BlackBerry Work app configuration settings.

In the 

Azure App ID

 field, specify the 

Microsoft Azure

 app ID for 

BlackBerry Work

. For information on how to obtain an 

Azure

 ID, see Obtain an Azure app ID for BlackBerry Work

In the 

Office 365 Sign On URL

 field, specify the web address that 

BlackBerry Work

 should use when signing in to 

Office 365

. If you do not specify a value, 

BlackBerry Work

 will use https://login.microsoftonline.com during setup. In most configurations, this field should be left blank.

In the 

Office 365 Tenant ID

 field, specify the tenant ID of the 

Office 365

 server that you want 

BlackBerry Work

 to connect to during setup. If you do not specify a value, a value of "common" is used. In most configurations, this field should be left blank.

In the 

Office 365 Resource

 field, specify the URL of the 

Microsoft Exchange Online

 server. In the 

Redirect URI

 field, specify the URI that you entered in the 

Microsoft Azure

 portal. In most configurations, this field should be left blank.

Select the 

Use Office 365 Modern Authentication for Presence

 option to use modern authentication with the presence service. The 

Enable presence service

 option on the Apps Settings tab must also be selected. 

Optionally, select the 

Proxy Office 365 Modern Authentication requests (Android only)

 setting to force all 

Office 365

 modern authentication requests to go through the 

BlackBerry Proxy

 instead of connecting directly to the Internet. This setting should be enabled if your organization's authentication server is not published externally to the internet. If your authentication server is published externally, this setting is optional.