Connect via your organization's own MS Entra app

IT Admin instructions for connecting Microsoft 365 emails

Use this setup when your team wants its own Microsoft Entra ID app registration. This gives your security team direct control over consent, mailbox scope, and revocation. If you are fine using Tally's shared multi-tenant app, use Connect Emails.

Before you start:

• A logged-in Tally user must open Settings → Email and start the setup.
• You can generate a secure setup link for your IT or Microsoft admin. They do not need a Tally account.
• The setup link expires 3 days after creation.
• Certificate creation and upload are required for this flow.

Steps to connect your custom Microsoft app to Tally

1. Start the setup in Tally

   1. Go to Settings → Email.
   2. Open Custom Microsoft app registration.
   3. Click Set up custom app.
   4. If your IT or Microsoft admin does not have a Tally account, generate the secure setup link and send it to them.
   5. Copy the link when it appears. It is shown once and expires 3 days after creation.

Once in the setup wizard, follow the guide below to configure your app and Tally's access.

1. Create the app registration

   1. Create the Microsoft Entra ID app registration that Tally will use.

1. Grant API permissions

   1. Grant only the permissions required by the integration.
2. Scope mailbox access with RBAC

   1. Grant Tally read access only to the mailboxes you want it to monitor by using Exchange Online RBAC for Applications.

1. Provide credentials to Tally

1. Create your certificate, upload it, then validate

   1. Create a certificate in your app registration.
   2. Upload the certificate to Tally.
   3. Run validation to confirm the setup works.

Once validation succeeds, you should see this:

Once connected, select the mailbox you want Tally to monitor. Tally only has access to the mailboxes you configure.