Step 4. Specify Azure AD Application Credentials

At this step of the wizard, specify connection parameters to the Microsoft Azure AD application that you want to use to access your Microsoft Office 365 resources.

To specify connection parameters, do the following:

1. In the Application ID field, specify an identification number of the Azure AD application.

You can find this number in the application settings of your Microsoft Azure Active Directory. For more information, see this Microsoft article.

2. Choose an Azure AD application authentication type. You can select either Application secret or Application certificate:

1. To use a secret key, in the Application secret field, enter a secret key to access your custom application.

To obtain a secret key, you will need to generate it first. For more information on how to generate a secret key, see this Microsoft article.

Mind that a key will become hidden once you leave or refresh the page in the Azure portal. Consider saving the key to a secure location.

2. To use a certificate, switch to the Application certificate option and click Install. For more information, see SSL Certificates.

To be able to use a certificate, you must upload it to the Azure portal. For more information, see this Microsoft article.

3. In the Username and App password fields, specify Exchange Online credentials of your Microsoft Office 365 organization.

The user account must be provided in either of the following formats: user@domain.com or user@domain.onmicrosoft.com. If you are using an ADFS account, you can only use a non-MFA enabled ADFS account.

4. Select the Grant this account required roles and permissions check box to automatically assign the ApplicationImpersonation role. This role is required to back up Microsoft Office 365 Exchange mailboxes.

To assign the ApplicationImpersonation role, make sure the account that you use is a member of the Organization Management group and has been granted the Role Management role in advance.

5. Select the Use the same credentials for SharePoint Online, OneDrive for Business and Microsoft Teams check box if you want to use the same credentials to access your Microsoft SharePoint Online, OneDrive for Business and Microsoft Teams organizations. This check box is only available if these organization types have been selected at the Select Organization Deployment Type step.

If the Use the same credentials for SharePoint Online, OneDrive for Business and Microsoft Teams check box is not selected, you will be offered to provide required credentials for the Microsoft SharePoint Online, OneDrive for Business and Microsoft Teams organizations at the Specify SharePoint Online, OneDrive for Business and Microsoft Teams Credentials step.