Skip to main content

Create App Registration

This guide will walk you through creating an Application ID and Client Secret for the Exchange Connection. The Exchange Connection uses an application identity in Microsoft Entra ID to create Shared Mailboxes and configure mailbox permissions in Microsoft 365 Exchange Online.

Overview of the required steps:

  1. Create an App Registration in Microsoft Entra ID.
  2. Grant Exchange API permissions to the app.
  3. Grant the Exchange Administrator role to the app.
  4. Generate a Client Secret for the app.

Create the App Registration​

  1. Go to App Registrations in Microsoft Entra ID.
    Direct link: https://portal.azure.com/#view/Microsoft_AAD_IAM/ActiveDirectoryMenuBlade/~/RegisteredApps

  2. Click New registration.

 
  1. Enter a descriptive name for the app registration, choose Accounts in this organizational directory only and click Register.
 
  1. Note the Application ID of the newly created App Registration and save it for later. This will be required to configure the connector.
 

Grant API Permissions​

  1. Navigate to API Permissions within the newly created App Registration. The existing default permissions can be removed by clicking the ellipsis on the right and then Remove all permissions.
 
  1. Click Yes, remove to confirm.
 
  1. You should now see no permissions listed. Click Add a permission.
 
  1. Click APIs my organization uses.
 
  1. Search for and select Office 365 Exchange Online.
 
  1. Select Application permissions.
 
  1. Expand Exchange and select Exchange.ManageAsApp.
 
  1. You should now see the new permissions listed with a message saying it has not yet been granted. Click Grant admin consent for...
 
  1. Click Yes to confirm.
 
  1. You should now see the Exchange.ManageAsApp permission listed with a green check.
 

Grant Exchange Administrator Role​

  1. Navigate to Roles and administrators in Microsoft Entra ID and double-click the Exchange Administrator role to open it.
    Direct link: https://portal.azure.com/#view/Microsoft_AAD_IAM/RolesManagementMenuBlade/~/AllRoles
 
  1. Click Add assignments.
 
  1. Search for and select the App Registration created earlier, then click Add
Tip

The Enterprise applications tab only appears after you begin searching.

 
  1. You should now see the new assignment listed.
 

Generate a Client Secret​

  1. Navigate to Certificates & secrets within the newly created App Registration and click New client secret.
 
  1. Enter a description, choose a validity period, and click Add.
 
  1. Record the client secret Value for use in the connector configuration.
Security Warning

Treat this Client Secret as a highly sensitive password. Be sure to store and transmit it securely.

 
  1. The Application ID and Client Secret for the App Registration can now be entered on the Conscript Exchange connector configuration page.

Exchange Connection Filled