MailBroom for Business · Last updated: 8 July 2026 · AIERT Ltd
MailBroom for Business uses OpenID Connect and OAuth 2.0 (the Authorization Code flow) against the Microsoft identity platform's v2.0 endpoint, via Microsoft Entra ID. It does not support SAML, and does not support any identity provider other than Microsoft Entra ID — this is a Microsoft 365-only product.
MailBroom for Business is published by AIERT Ltd (Companies House No. 16587000) and is a Microsoft Publisher Verified application (MPN ID 7106038) — the sign-in consent screen shows AIERT Ltd's verified badge.
None. There's no SAML metadata to exchange, no certificate to upload, and no SSO setup screen in the app. Sign-in uses Microsoft's own native OAuth flow — a user clicks "Sign in with Microsoft" and authenticates exactly as they would for Outlook or Teams. The only thing that can require IT action once is a one-time admin consent grant, described below.
| Scope | Type | Why it's needed |
|---|---|---|
| openid, email, profile | Standard OpenID Connect scopes | Confirms who's signing in — your name, email, and that you have a valid Microsoft account. Included automatically with every Microsoft sign-in. |
| offline_access | Delegated · Microsoft Graph | Lets MailBroom refresh its own access token quietly in the background, so you're not prompted to sign in again every hour during a long cleanup session. |
| Mail.ReadWrite | Delegated · Microsoft Graph | The core permission Smart Sweep, Storage Cleanup, and Power Search all depend on — reading mailbox contents to rank senders and size, and performing the bulk delete/move actions you choose. |
| Mail.Send | Delegated · Microsoft Graph | Used for exactly one feature: notifying your organisation's admin by email the moment a seat-limit is reached, sent on the signed-in admin's own behalf. Not used anywhere else. |
Some Microsoft 365 tenants are configured to require an administrator to approve a new application's permissions before any user in that tenant can sign in to it. If your tenant is configured this way, the first person to sign in will see a message asking an admin to grant consent — any Global Administrator or Cloud Application Administrator can do this in one click from that same screen, and it only needs doing once per organisation.
IT Directors evaluating MailBroom for Business can request a free 30-day trial — a time-limited login with full feature access, no card required, no company-wide licence purchase needed to test it against your own tenant.
Request a trial →For SSO onboarding, integration questions, or anything gallery/marketplace-review related, contact AIERT Ltd directly.
Email AIERT Ltd at support@aiert.co.uk — this is our named engineering and support contact for SSO onboarding and integration queries.