How to setup ExchangeOnlineManagement for unattended scripting using a certificate

In the age of modern authentication and Exchange Online scripting, we are no longer able to use a user name and password to authenticate. If you use multi-factor authentication, there's a good chance you've run into this if you've ever tried to set up an unattended script.

In this snip, Anthony will walk you through how to set up an App Registration in Azure Active Directory with access to the Exchange Online APIs and the Exchange Administrator role, how to create a certificate and add it to the app registration, and finally, how to use them to authenticate to Exchange Online via PowerShell.

Prerequisites include:
ExchangeOnlineManagement module

[rickaus_ttv]

Nice and concise. Love it when a video doesn't waffle and gets to the point

[sheikvenus]

Thanks for the video and really helpful,
Will this work when MFA is active and
For security prospective, can we restrict for particular account for the login gain access through certificate based access, and can we get logs for the login track

[-ajayNathreddy]

I have used same authentication and got access token to connect exchange online. I installed exchaneonlinemanagement module to create diatribution lists but unable to since it is showing those commands are avilable or acesseble.

[michaelhayek]

Hi, thanks for this. is it possible to set this up to be run by a service account? When running using a service account i get error aquiring token message. Do you know what i am doing wrong?

[raunaktailor]

do we create this certificate on the Local server from where we are trying to connect to Exchange online right?

[raunaktailor]

Could you please provide the script in comments sir

[MrDhanasekar]

For MSolservice how shall we make the connection happen using certificate please

[marcuslee]

Hi, thanks for sharing this useful guide.
I managed to configure it.
I noticed it is taking a longer time to establish Remote PowerShell to ExchangeOnline, is such behaviour expected ?

[tallbadger]

I keep getting an error trying to use Add-UnifiedGroupLinks to update 365 groups.
Write-ErrorMessage : failed to update the group mailbox. Please try again later.
Is there any other permissions that I need to add to the application?