Azure App Configuration

This describes the steps required to setup an App within the Azure Active Directory required when either an Smtp or POP3 server will send mail via or access an Office365 mailbox.

Please note the instructions below are the broad steps required based on a typical Office365 subscription.

The steps may vary dependent on the level of subscription and administrative privileges and are not an exhaustive discussion of Azure permissions.

Following the App Creation, you will have noted three values (Azure Tennant Id, Azure Application/Client Id, Client Secret) which are used when setting either the Office365 Smtp Server or Office365 POP3 Server servers.

Azure Active Directory Login

1. Login to the Azure Active directory with a user which has admin rights i.e. rights to create an App in the Azure Active Directory.

   

2. Click the App Registrations.
   

Create An App Registration

1. Click the New Registration button at the top.

   

2. Click Authentication and add a new Redirect Uri

   https://authorisation.realisable.co.uk/OAuthCallback

   

   Then press Save.
   

3. Click Certificates and secrets, then Client secrets, then New Client Secret.

4. Enter a description and select an expiry, then press Add.

   A short expiry will mean you will need to re-authenticate often.

   

5. Make a note/copy of the Client Secret (it will only be shown once). If you do not copy the value you will need to recreate a new secret.

   

6. Click API Permissions.

   

7. Click Add Permission.

   

8. Click Delegated Permission.

   

9. Click/select Microsoft Graph.

   

10. In the search bar search for 'offline_access' and select the checkbox.

    

11. Repeat the step above to add the following permissions.

    • openid
    • User.Read
    • Smtp.Send
      • This allows users to send email.
    • POP.AccessAsUser.All
      • Only required when requiring access to an Azure POP3 Mailbox.

    

12. Click Overview.

    

13. Note the Tennant ID and Application ID values/GUIDs.