Modern Authentication Guide

How to Register App in Azure Active Directory

When opting for Modern Authentication in MailsDaddy migration and backup software, register your custom application in Microsoft Entra ID (Azure AD) to generate the required Tenant ID, Client ID, and Client Secret.

Table of Contents

01

Register the App in Microsoft Entra ID (Azure AD)

Application registration can be completed either through the Microsoft 365 Admin Center or directly within the Azure Portal (portal.azure.com).

Step 1: Sign In to Admin Center

Sign in to the Microsoft 365 Admin center using your global admin credentials. Under the Admin centers sidebar menu, select "Identity" (Microsoft Entra ID).

Step 2: App Registrations

In the Identity navigation tree, expand the Applications menu and click on "App registrations".

Step 3: New Registration

On the top toolbar of the App registrations page, click on the "+ New registration" button.

Step 4: Configure App Name & Accounts

Enter a recognizable name (e.g., MailsDaddy Migration App). Under Supported account types, select Accounts in this organizational directory only (Single tenant). Click "Register".

02

Add API Permissions

After registering the application, navigate to "API permissions" under the Manage menu on the left. Click on "+ Add a permission", select Microsoft Graph, and choose Application permissions.

Exchange Online

For mailbox export and migration:

  • • full_access_as_app
  • • Mail.ReadWrite
  • • MailboxSettings.ReadWrite
  • • User.Read.All

OneDrive & SharePoint

For document and cloud storage backup:

  • • Files.ReadWrite.All
  • • Sites.FullControl.All
  • • Directory.Read.All

Microsoft Teams

For channel chats and team archives:

  • • ChannelMessage.Read.All
  • • Group.ReadWrite.All
  • • Team.ReadBasic.All
Important Step — Grant Admin Consent: Once you add the permissions, you must click on the button "Grant admin consent for [Your Organization]" and confirm the prompt to authorize the application.
03

Generate Client Secret Value

Under the Manage category, click on "Certificates & secrets". Select the "Client secrets" tab and click on "+ New client secret".

Enter a description (e.g. MailsDaddySecret) and choose your preferred expiration timeframe (e.g. 180 days or 24 months). Click "Add".

Copy the string displayed in the "Value" column immediately. Azure only displays this secret once upon creation.
04

Assign Global Administrator Role

In Microsoft Entra ID (Azure AD), navigate to Roles & administrators.

Search for "Global Administrator" and click on it. Click on "+ Add assignments", search for your registered app name (e.g., MailsDaddy Migration App), select it, and click "Add".

This ensures your application has permission to access the required mailboxes, folders, and tenant directories.

Need Help Finding Your Tenant ID & Client ID?

Read our dedicated guide explaining where to copy your Tenant ID, Client ID, and Secret.

Read Companion Guide →