Page History

...

1. Log into the Azure Management Portal for your Office 365 tenant.
2. Go to the Azure Active Directory tab and select App Registrations.
3. Select "New Registration".
4. On "Supported account types" select "Accounts in this organizational directory only ".
5. On "Redirect URI" select Web.
6. Enter a Sign-on URL (the value of this doesn’t really matter other than being unique) and click "Register".
7. Look for your new application on the Registered Applications list and click it.
8. Go to API Permissions and click on "Add a permission".
9. On the "Select an API" section, add the "SharePoint" application
10. Select "Application Permissions" and check the following permissions:
    1. TermStore.Read.All: Read Managed Metadata.
    2. Sites.FullControl.All: Have Full Control of all Site Collections.
    3. Sites.Read.All: Read Items in all Site Collections.
11. Click on "Add permissions".
12. After saving, you have to click "Grant admin consent" to apply the changes.

...

1. Go to "Certificates and secrets".
2. Click on "Upload certificate".
3. Select the certificate created on in Part 1.
4. Add the certificate.

...