Topics

See more

Microsoft Outlook

Supported Version Cloud.

About OAuth 2.0

OAuth 2.0 lets users access instance resources through external clients by obtaining a token rather than by entering login credentials with each resource request.

You must have the security_admin role to manage the OAuth integration. 

 

API Rate Limit: 10000 requests/10 min

Refer the link for more info: https://learn.microsoft.com/en-us/graph/throttling-limits

 

Setting up OAuth 2.0 application in Outlook

Follow the below steps to register an OAuth 2.0 application on Microsoft Outlook(Mail and Calendar) using your account.

  1. Login into Azure Account using https://portal.azure.com/#blade/Microsoft_AAD_RegisteredApps/ApplicationsListBlade
  2. Click on “New registration” and enter following details:
    i) Name : User Friendly Name of OAuth 2.0 App, like “KleraOutlookApplication”
    ii) Click on the Submit button.
  3. Go to “Certificates & Secretes” & click on “New client secret”. Enter description and choose validity period. Copy the string generated by the system under column “Value”. This is our Client Secret ID.
  4. Go to “Authentication” and add a redirect URL under the “Redirect URIs” section.
    i) Choose Type -> Web
    ii) Redirect URI -> Redirect URL of Klera machine.
  5. Go to API Permissions and click on “Add a permission”. Under Microsoft-> Delegated permissions choose followings:
    i) Mail.ReadBasic
    ii) Mail.Read
    iii) Calendars.Read
    iv) Mail.Read.Shared
  6. Go to “Expose an API” and click on Add a scope. Now add following scopes with their user friendly description:
    i) Offline_access
  7. Select Azure Active Directory.
  8. Select Properties.
  9. Then, scroll down to the Tenant ID field. Your tenant ID will be in the box. Save this tenant Id as we’ll be needing it to create Authorization URL and Access Token URL.

Important:

  1. This URL should be accessible from the client machine. Machine from where the user is logged into Klera.
  2. Need to add port 48444 in Firewall/Security systems whitelist.
  3. You will need additional permissions from the Microsoft Azure Administrator or from IT department to register an application.
  4. Please make sure your Microsoft Outlook Connector instance must be accessible from the Klera Machine.

Steps to configure connection of connector:

  1. Right click on Connector >> Connections >> Configure.
  2. Enter Instance URL : https://graph.microsoft.com
  3. Application Key: Client Id generated from the azure app
  4. Application Secret : Client secret Id generated from azure app.
  5. Authorization URL : https://login.microsoftonline.com/{tenantId}/oauth2/v2.0/authorize
  6. Access Token URL : https://login.microsoftonline.com/{tenantId}/oauth2/v2.0/token
  7. Domain for Callback Authentication : Enter HostName with Domain Name of the Klera machine.
    Example: HostName-123.Kleramachine.com
  8. Scope : Mail.ReadBasic Mail.Read Calendars.Read
  9. Create New Account and give a user-friendly account Name like : Microsoft Outlook Account.
  10. Click "Save".
  11. On clicking ‘Save’, a pop-up will appear which requires Outlook user to login using the credentials asked in the pop-up window.

Important: Please make sure, the pop-up is not blocked by the chrome browser.







Related articles

↑