1.Log to Microsoft Office 365 portal and click on Identity.

2.Select Identity (1) > App registrations (2) > New registration (2b).

3.Enter a complete name for your application. Users of the app will see the complete name when they use it.

4.Specify who can use the application, sometimes referred to as sign-in audience.

5.Click on Register.

6.Once registration has been completed, the Azure portal displays the global overview pane of the application registration. The Application (client) ID is displayed. Also called client ID, this value uniquely identifies your application in Microsoft identity platform.

1.In the Microsoft ID portal, in App registration (a) page, under the tab All applications (b), click to open the app added in the previous step (c).

2.Choose the API permissions pane in the management view of your application.

3.Select Add a permission.

4.Select the tab APIs my organization uses.

5.Search and select "Office 365 Exchange Online".

6.Click on Application permissions.

7.For IMAP access, choose IMAP.AccessAsApp. (For POP, choose POP.AccessAsApp.)

8.Once you have chosen the permission type, select Add permissions.

9.Go back to Add a permission (a) and select Microsoft Graph (b), Delegated Permissions, search for SMTP (d) amd select SMTP.send (e).

10. Once you have selected the permission type, click on Add permissions (f).

11. Grand administrator consent.

You now have set up the application permissions for POP or IMAP, that have been added to the permissions in you AAD application.

1.In Microsoft Identity portal, choose the Authentication pane in the management view of your Entra ID application.

2.Select Add a platform, then Mobile and desktop applications.

3.Tick the 3 check boxes and click on Configure.

4.Select Add URI.

5.Add the 2 following URLs: "http://127.0.0.1:3016" and "http://127.0.0.1:3017" and Save.

Do not use "http://localhost:3016", since the localhost can be blocked by the firewall or antivirus. Note that these 2 ports must be open in the firewall.

To be able to use SMTP to send emails via PRIM, SMTP authentication must be enabled on the email address. If such authentication is not allowed, when clicking on "Activate connection" in the user profile, the following error messag is displayed:  "Authentication unsuccessful, SmtpClientAuthentication is disabled for the Tenant. Visit https://aka.ms/smtp_auth_disabled for more information."

To allow SMTP authentication on an email address, please refer to the instructions provided by Microsoft: Enable SMTP Authentication for specific mailboxes.