> For the complete documentation index, see [llms.txt](https://docs.tallygo.ai/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://docs.tallygo.ai/connect-your-systems/how-tally-connects-to-your-emails/connect-via-your-organizations-own-ms-entra-app.md).
# Connect via your organization's own MS Entra app
Use this setup when your team wants its own Microsoft Entra ID app registration. This gives your security team direct control over consent, mailbox scope, and revocation. If you are fine using Tally's shared multi-tenant app, use [Connect Emails](/connect-your-systems/how-tally-connects-to-your-emails/connect-your-organization-to-the-tally-365-app.md).
Before you start:
* A logged-in Tally user must open **Settings → Email** and start the setup.
* You can generate a secure setup link for your IT or Microsoft admin. They do not need a Tally account.
* The setup link expires 3 days after creation.
* Certificate creation and upload are required for this flow.
### Steps to connect your custom Microsoft app to Tally
1. Start the setup in Tally
1. Go to **Settings → Email**.
2. Open **Custom Microsoft app registration**.
3. Click **Set up custom app**.
4. If your IT or Microsoft admin does not have a Tally account, generate the secure setup link and send it to them.
5. Copy the link when it appears. It is shown once and expires 3 days after creation.
Once in the setup wizard, follow the guide below to configure your app and Tally's access.
2. Create the app registration
1. Create the Microsoft Entra ID app registration that Tally will use.
3. Grant API permissions
1. Grant only the permissions required by the integration.
4. Scope mailbox access with RBAC
1. Grant Tally read access only to the mailboxes you want it to monitor by using Exchange Online RBAC for Applications.
5. Provide credentials to Tally
6. Create your certificate, upload it, then validate
1. Create a certificate in your app registration.
2. Upload the certificate to Tally.
3. Run validation to confirm the setup works.
Once validation succeeds, you should see this:
Once connected, select the mailbox you want Tally to monitor. Tally only has access to the mailboxes you configure.
---
# Agent Instructions
This documentation is published with GitBook. GitBook is the documentation platform designed so that both humans and AI agents can read, navigate, and reason over technical content effectively. Learn more at gitbook.com.
## Querying This Documentation
If you need additional information that is not directly available in this page, you can query the documentation dynamically by asking a question.
Perform an HTTP GET request on the current page URL with the `ask` query parameter, and the optional `goal` query parameter:
```
GET https://docs.tallygo.ai/connect-your-systems/how-tally-connects-to-your-emails/connect-via-your-organizations-own-ms-entra-app.md?ask=&goal=
```
`ask` is the immediate question: it should be specific, self-contained, and written in natural language.
`goal` is optional and describes the broader end goal you are ultimately trying to accomplish on behalf of the user. GitBook uses it to tailor the answer towards what is most useful for that goal.
The response will contain a direct answer to the question and relevant excerpts and sources from the documentation.
Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.