Application Registration

This version includes an enhancement for securing connection between Release Notes and the M365 tenant platform using Application Registration authentication instead of Delegated Token authentication. The Application Registration method provides the following advantages:

Seamless Operation: Allows Live Platform to authenticate and access M365 resources without requiring user sign-in. This is especially useful when running the Background Replication process for synchronizing the customer service portal configuration with the customer tenant Microsoft 365 platform, enabling it to run seamlessly without disruption of service due to user session timeouts.
Enhanced Security: The use of client credentials ( Application client ID and secret) provides more secure mechanism than the user token. In cases where more than one service is deployed for each Azure tenant, separate secrets can be created for each service.
Scalability: the Live Platform Multitenant can process a large numbers of requests across multiple tenants without disruption of service due to expired tokens or token refresh.

The customer can create the new Application Registration through the new Invitation wizard (see below). The wizard can be accessed from the Microsoft 365 Settings page in the Service portal either directly or by sending an email request. Once created, they give their provider or reseller the credentials of the registration (Application (Client) ID, Client secret and Microsoft Tenant Id) who can then configure in the Onboarding wizard and complete the onboarding process.

In Day Two, you can apply the same registration for additional services on the customer tenant. In this case, its recommended to generate separate client secrets for each service.

For Backward compatibility it is still possible to secure connection using the Delegated Token method.
Customers can alternatively create the new Application Registration manually on their M365 Azure tenant instead of via the Invitation wizard.

Securing connection using Application Registration is only relevant for Hosted Essentials Plus and Hosted Pro customers.
Customers with services using Username and Password authentication must first upgrade to Delegated Token authentication before they can upgrade to Application Registration authentication.