On the Email Security - Server appliance, the admin creates an Microsoft Office 365 app and registers it for an Azure AD v2.0 endpoint through the Microsoft App Registration Portal.
During app registration, the following unique properties are generated and used to authenticate with Azure AD for access tokens:
An application ID
A secret password key
A tenant ID
Note
Just one app instance is created to initiate integration on the Email Security - Server appliance.
For more information about Microsoft Application registration, go to portal.azure.com
Prerequisites
Administrator or Operator access to the Email Security - Server appliance.
A Microsoft account for the Email Security - Server appliance administrator.
A connection to the Email Security - Server appliance.
To register an app:
Go to the Microsoft Application Registration Portal from a Web browser.
Sign in using a Microsoft account for the ADD Product Series appliance administrator.
Find App registrations and click + New registration.
Enter the name for the app.
Under Supported account types, select Accounts in this organizational directory only.
Click Register. A message confirms the creation of the app and the Overview page appears.
In the Overview page, copy the Application (client) ID and the Directory (tenant) ID for use during app authorization.
After you register your app, you must create a client secret password key in the Overview page.
In the Overview page under Manage, select Certificates & secrets.
Under Client secrets, click + New client secret.
Enter an optional description for the password key.
Select when the key will expire.
Click Add.
Copy the key to your clipboard.
Important
The secret password key is used to authorize app communication in the Email Security - Server Web UI. After the dialog box closes, you cannot return to retrieve the password.