Register a client credentials app

Register an app in your Azure tenant and create credentials for use with client credentials authentication in the Office 365 Mail connector.

Before you begin

  • You have registered an app in your Azure tenant and created credentials for it.
  1. Go to the app registrations page for your Azure tenant.

    The URL depends on your tenant's environment:

  2. Click + New Registration.
  3. Enter a Name for the app. For example, Okta Workflows Office 365 Mail Client Credentials.
  4. Under Supported account types, select Single tenant only - your tenant.
  5. For Redirect URI, don't set a value. A redirect URI isn't required for the client credentials flow.
  6. Click Register.
  7. Copy the Application (client) ID from the Overview page, and store it in a safe place.
  8. Go to Certificates & secrets.
  9. Click + New client secret.
    1. Enter a Description.
    2. Select an Expires duration that meets your security requirements.
    3. Click Add, then record the secret Value in a safe place.
  10. Go to API permissions > Add a permission > Microsoft Graph > Application permissions.
  11. Select the following permissions, then click Add permissions:
    • Mail.ReadWrite
    • Mail.ReadWrite.Shared
    • Mail.Send
    • Mail.Send.Shared
  12. Click Grant admin consent for your tenant, and then click Yes to confirm.

Use the tenant, Application (client) ID, and client secret Value to create a connection. See Authorization.