Configuring Mail Server for Server Authentication

Register Application

Register the application with your Azure Active Directory tenant. Some registration is required for Microsoft to act as an authority for your application.

Configure Application

1. Choose the Azure AD tenant where you want to create your applications.
2. Sign in to the Azure portal.

   If your account is present in more than one Azure AD tenant, select Directory + Subscription, which is an icon of a notebook with a filter next to the alert icon, and switch your portal session to the desired Azure AD tenant.

3. Select Manage Azure Active Directory.
4. Select App registrations.
5. Register the client app:
   1. In the App registrations page, select +New registration.
   2. When the Register an application page appears, enter your application's registration information:
      • In the Name section, enter a meaningful application name. This is not used in System Configurator.
      • In the Supported account types section, select an option that suits your purposes.
      • No need to specify Redirect URI since it is not used in this case.
6. Select Register to create the application.
7. On the app Overview page, find the following values and copy them:
   • Application (client) ID
   • Directory (tenant) ID
8. Click the View API permissions button or API permissions left navigation item.
   1. Click the Add a permission button and then ensure that the Microsoft APIs tab is selected (by default, it is selected).
   2. In the Commonly used Microsoft APIs section, click on the Microsoft Graph.

      

   3. In the Application permissions section, ensure that the right permissions are checked: Mail.ReadWrite. (Mail.Send if you are going to use MS365 as an outgoing mail server.) Use the search box if necessary.

      

      

      Note: Pay attention to the text describing permission Mail.ReadWrite - Read and write mail in all mailboxes. These are very powerful permissions. The section Granting Permissions to Access Mailboxes tells how to limit application access to specified mailboxes.
   4. Select the Add permissions button. Permissions are now assigned correctly but the client app does not allow interaction. Therefore, no consent can be presented via a user interface and accepted to use the service.
   5. Click the Grant/revoke admin consent for [tenant] button, and then select Yes when you are asked if you want to grant consent for the requested permissions for all accounts in the tenant. You need to be an Azure AD tenant admin to do this.
9. In the left navigation pane, select Certificates & secrets.
10. Add the application password. The Sinch Contact Pro application will use this password to authenticate and request OAuth token at the MS365 Mail Server.
    1. Click New client secret.
    2. Specify description. This is not used by Sinch Contact Pro.
    3. Select expiration. If you choose a secret that expires in the future, you must repeat these steps when the secret expires.
    4. You will be shown an ID and value. Copy the value field. You will not be able to retrieve it in the future. You get more information from the information message at the top of the page.

    Azure AD configuration is completed.