Adjust App Registration for empower® Mails Online

Available from Version: 9.3 (Client), 9.4 (Backend)

Required Permissions: IT Admin

If you want to use empower^® Mails Online, you need to make some adjustments to your existing app registration in the Azure Portal.

Doing so, Single Sign-On will be enabled for empower^® Mails Online.

If you have not yet created an app registration for empower^®, follow the instructions under Script for App Registration in Microsoft Entra ID.

Following the instructions in this article, you can configure all adjustments for empower^® Mails Online using the linked script here.

Execute the Mails Online Script

To make your adjustments in the Azure Portal, you can use the provided script. Like this, you do not need to make any manual changes to your app registration.
Download the script from the following link: Download Script
To execute the script and enable Single Sign-On for empower^® Mails Online, follow the following steps:
Unpack the downloaded .zip folder EntraIdAppRegistration.zip. The unpacked folder contains three files. To adjust the existing app registration, you will only need the file EntraIdAppRegistration_MailsOnline.ps1. Execute the script EntraIdAppRegistration_MailsOnline.ps1 via PowerShell. Specify the Tenant ID for the app registration. Specify the application name for the app registration. The script will then adjust the respective app registration as required.

After successfully executing the script, check if all required changes have been made.

To do so, check if the following is true:

An application ID URI has been created.
A scope called access_as_user has been created.
Three authorized client applications have been added.
The access token version has been changed.

This change can be viewed in the manifest.

The value for requestedAccessTokenVersion should now be set to 2.