Microsoft Entra ID
DeveloperManage App Consent Policies
In brief
The documented application IDs for Apple Mail, Spark Email, eM Client, Android-Samsung, Android-Mail, and Thunderbird were replaced.
What Entra admins need to know
Administrators using these identifiers in consent policy rules should verify them against the updated documentation.
This editorial summary was generated by AI from the documentation changes. Verify important details in the full Microsoft Learn article.
Documentation change
View on Microsoft LearnThe comparison below shows only the changed extract. Use the full-page view for complete context.
Mail client policy
An additional policy is enabled by default is the microsoft-user-allow-default-consent-apps policy. This policy allows end-users in your organization to consent for popular mail applications for mail permissions. When this policy is enabled, end users will be able to consent for specific delegated mail permissions (Microsoft Graph and Office 365 Exchange Online permissions: EAS.AccessAsUser.All, EWS.AccessAsUser.All, IMAP.AccessAsUser.All, POP.AccessAsUser.All) for the following applications:
- Apple Mail (application ID:
f8d98a96-0999-43f5-8af3-69971c7bb423)00001111-aaaa-2222-bbbb-3333cccc4444) - Spark Email (application ID:
b50c1dbd-1855-4e54-b07c-d3c3029e93d3)11112222-bbbb-3333-cccc-4444dddd5555) - eM Client (application ID:
e9a7fea1-1cc0-4cd9-a31b-9137ca5deedd)22223333-cccc-4444-dddd-5555eeee6666) - Android-Samsung (application ID:
8acd33ea-7197-4a96-bc33-d7cc7101262f)33334444-dddd-5555-eeee-6666ffff7777) - Android-Mail (application ID:
2cee05de-2b8f-45a2-8289-2a06ca32c4c8)44445555-eeee-6666-ffff-7777aaaa8888) - Thunderbird (application ID:
9e5f94bc-e8a4-4e73-b8be-63364c29d753)55556666-ffff-7777-aaaa-8888bbbb9999)
Multiple policies or authorization mechanisms to grant consent
@@ -64,12 +64,12 @@ The setting labeled "Let Microsoft manage your consent settings," the Microsoft ### Mail client policy An additional policy is enabled by default is the **microsoft-user-allow-default-consent-apps** policy. This policy allows end-users in your organization to consent for popular mail applications for mail permissions. When this policy is enabled, end users will be able to consent for specific delegated mail permissions (Microsoft Graph and Office 365 Exchange Online permissions: EAS.AccessAsUser.All, EWS.AccessAsUser.All, IMAP.AccessAsUser.All, POP.AccessAsUser.All) for the following applications:-- Apple Mail (application ID: f8d98a96-0999-43f5-8af3-69971c7bb423)-- Spark Email (application ID:b50c1dbd-1855-4e54-b07c-d3c3029e93d3)-- eM Client (application ID:e9a7fea1-1cc0-4cd9-a31b-9137ca5deedd)-- Android-Samsung (application ID:8acd33ea-7197-4a96-bc33-d7cc7101262f)-- Android-Mail (application ID:2cee05de-2b8f-45a2-8289-2a06ca32c4c8)-- Thunderbird (application ID:9e5f94bc-e8a4-4e73-b8be-63364c29d753)+- Apple Mail (application ID: 00001111-aaaa-2222-bbbb-3333cccc4444)+- Spark Email (application ID:11112222-bbbb-3333-cccc-4444dddd5555)+- eM Client (application ID:22223333-cccc-4444-dddd-5555eeee6666)+- Android-Samsung (application ID:33334444-dddd-5555-eeee-6666ffff7777)+- Android-Mail (application ID:44445555-eeee-6666-ffff-7777aaaa8888)+- Thunderbird (application ID:55556666-ffff-7777-aaaa-8888bbbb9999) ## Multiple policies or authorization mechanisms to grant consent