Please follow these four main steps to set up Newoldstamp integration with Microsoft 365:
Register the application in Microsoft Entra ID (formerly Azure AD).
Assign API permissions to access Exchange Online.
Attach a certificate (Newoldstamp1.cer).
Assign roles for application.
Step 1: Application registration in Microsoft Entra ID (formerly Azure AD).
If you encounter problems, check the required permissions to verify that your account can create the identity.
Sign in to the Microsoft Entra admin center as at least a Cloud Application Administrator.
Under Azure services, select App registrations and then click New registration.
On the Register an application page, configure the following settings:
Name: Enter something descriptive (e.x. Newoldstamp Email Signatures)
Note: You can change the display name anytime; multiple app registrations can share the same name. The app registration's automatically generated Application (client) ID, not its display name, uniquely identifies your app within the identity platform.
By choosing Supported account types, specify who can use the application (sometimes called its sign-in audience.). Select the option Accounts in this organizational directory only.
Redirect URI (optional): In the first box, select Web.
4. Once all the above is done, click Register.
Step 2: Assign API permissions to the application.
Note: The procedures in this section replace any default permissions that were automatically configured for the new app. The app doesn't need the default permissions that were replaced.
On the app page, under Management, select Manifest.
On the Manifest page that opens, find the "requiredResourceAccess" entry (on or about line 53).
Modify the resourceAppId, resourceAccess, id, and type values as shown in the following code snippet (JSON representation):
"requiredResourceAccess": [
{
"resourceAppId": "00000002-0000-0ff1-ce00-000000000000",
"resourceAccess": [
{
"id": "dc50a0fb-09a3-484d-be87-e023b12c6440",
"type": "Role"
}
]
}
],When you're finished, click Save.
Next, go to API permissions under Management.
On the API permissions page that opens, do the following steps:
API / Permissions name: Verify the value Exchange.ManageAsApp is shown.
Status: The current incorrect value is Not granted for <Organization>, and this value needs to be changed.
Select Grant admin consent for <Organization>, read the confirmation dialog that opens, and then click Yes.
The Status value should now be Granted for <Organization>.
Step 3: Attach the certificate (Newoldstamp1.cer) to the Microsoft Entra ID (formerly Azure AD) application.
Under Manage, on the left side menu, select Certificates & secrets.
Click here to download the certificate file (Newoldstamp1.cer).
On the Certificates & secrets page that opens, click Upload certificate.
In the dialog that appears, browse the downloaded file Newoldstamp1.cer certificate, then click Add.
Step 4: Assign a role to the application.
On the Microsoft Azure portal at https://portal.azure.com/, under Azure services, select Microsoft Entra ID.
Under Manage, click Roles and administrators.
On the Roles and administrators page that opens, find (use the search bar: Exchange) and click the Exchange Administrator role(not the check box).
On the Assignments page that opens, click Add assignments.
In the Add assignments flyout that opens, find and select the app that you registered in Step 1 of this guide and click Add.
Back to the Assignments page and verify that the app has been assigned to the role.
Step 5: Finally, let us know the App ID and original domain when registering O365 (.onmicrosoft.com).
Please go ahead and return to the Microsoft Azure home page and select App registrations.
Under the App registrations, navigate to All applications, find the app you registered, and tap on it to open its Overview.
Copy the Application (client) ID.
Navigate and log in to the Microsoft 365 Admin Center.
In the left-hand menu panel under Settings, click Domains > copy the domain.
Note: It's crucial to use the domain used to register a Microsoft 365 account with - .onmicrosoft.com (e.x. name@newoldstamp.onmicrosoft.com).
Next, open your Newoldstamp account and go to the Integration tab. You can use the copied Application (client) ID and original domain to connect Newoldstamp Microsoft/Exchange 365 integration.
