How to Create an Application ID and Application Secret for Barracuda Message Archiver for Entra ID
This article refers to Barracuda Message Archiver firmware release version 5.5.3 or higher, and Microsoft Entra ID. For more information on how to update to the latest firmware, see Updating Your Firmware and Definitions.
When setting up Entra ID in the Barracuda Message Archiver, you will need an application ID and application secret from Microsoft 365.
Register an Application
Log in to Microsoft Entra as a global admin Microsoft Entra admin center.
In the left-hand menu, select App registrations.
Select New registration.
Enter a name for the app. For example, “ArchiverApp”.
Under Supported Account Types, select Accounts in this organizational directory only.
Click Register.
Grant Permissions
Your application ID is now available in the app overview. You must now grant the required permissions.
On the Overview page, click View API permissions under Call APIs at the bottom.
Microsoft Graph is listed by default. It is recommended to remove all permissions and add the necessary permissions. Click the 3 dots to the right and select Remove permission.
Under Configured permissions, select Add a permission.
Click Microsoft Graph > Application permissions, type “dir” in the search bar. Under Directory, check the Directory.Read.All box.
Click Add permissions at the bottom to save.
Under Configured permissions, click Add a permission again.
Select APIs my organization uses, then type “office” in the search bar to find & select Office 365 Exchange Online.
Under Office 356 Exchange Online, select Application permissions. Under Other Permissions, check the full_access_as_app box.
Click Add permissions at the bottom to save.
Under Configured permissions, select Grant admin consent for.
In the left-hand menu, select Authentication. Under Redirect URIs, click Add URI and enter your Barracuda Message Archiver's IP address.
Generate Application Secret
After granting the necessary permissions, you can now generate the application secret.
In the left-hand menu, select Certificates & secrets. Select New client secret.
Add a description and an expiration date. Barracuda Networks recommends using 730 days (24 months).
Click Add at the bottom.
Once your client secret is created, copy down the Value as it will not be displayed again.
Note that once you leave the page, the value will no longer be visible. If it is not copied at that time, the value must be deleted and recreated.
On the left-hand menu, select Overview and copy down the Application (client) ID.
The Value and Application (client) ID you copied down can now be used to authorize the Barracuda Message Archiver permissions to connect to Microsoft Entra ID.