Registering Active Administrator for Office 365 Exchange Online
To use email notifications using Office 365 Exchange Online, you need to register Active Administrator with Azure Active Directory. During the registration process, the following variables are generated. These variables are used when you configure Exchange Online authentication.
• Application ID: Required to authenticate to your Azure Active Directory tenant.
• Tenant ID: The tenant associated with the client.
To register an application for Office 365 Exchange Online through Azure Active Directory:
1 - Log into the Azure Active Directory portal (https://portal.azure.com/) with your global administrator user account.
2 - In the Microsoft Azure dashboard, go to Azure Active Directory | App registrations, and click New Registration.
3 - Enter a name for the application.
4 - Under Supported account types, select Accounts in this organizational directory only (Single tenant) for the accounts that can access the application API.
5 - Leave the Redirect URI (optional) field empty.
6 - Click Register.
7 - On the Overview tab, go to View API Permissions. Click Add a permission, click Microsoft Graph | Application Permissions and add the Mail.ReadWrite and Mail.Send permissions. See Microsoft documentation for details on limiting permissions to specific Exchange Online mailboxes. (Note: The Enforce approver account validation option found when configuring email notifications will not function if you select to follow the Microsoft article to restrict access to a single mailbox.)
8 - Click Add Permission.
9 - On the API Permissions tab, under Grant consent, click Grant admin consent for tenant name.
10 - Click Yes to confirm.
11 - On the preview screen, click Overview, and note the application ID and the directory ID. (You will need these values when setting up email settings.)
12 - Go to Manage | Certificates & secrets, select Upload certificate and upload the required .cer file.
