Open Documentation Menu

Preparing for the authentication of the Groupware app with OAuth 2.0 and Microsoft Graph in Azure Active Directory

If you are using Microsoft Office 365 in combination with the Groupware app and Microsoft Graph, ensure that the Groupware app is authenticated with OAuth 2.0. This method of authentication is recommended by Microsoft.

Note

The Microsoft Graph interface does not support the following functions:

  • Access to public folders

  • Access to the online archive

  • Importing and exporting the complete data of the message classes Tasks (IPM.Task) and Distribution list (IPM.DistList)

  • Specifying colors for a category (each user sets the color individually)

If you are using d.ecs content crawler, the following additional restrictions apply:

  • Journal archiving is not supported.

  • Only e-mail items can be restored from the d.velop documents result list.

To use authentication with OAuth 2.0, you must first adjust the configuration in Azure Active Directory. Then, adjust the settings in the Groupware app as required.

You must perform the following preparatory tasks for authentication with OAuth 2.0 in Azure Active Directory:

  • Registering the Groupware app in Azure Active Directory: Create a new app registration for the Groupware app. Specify which accounts can access the API. Enter the base address of the d.velop documents system environment as a redirect URI.

  • Configuring the API permissions: Add the following API permissions from the area Microsoft Graph > Application permissions:

    • Group.Read.All

    • GroupMember.Read.All

    • Mail.ReadWrite

    • MailboxSettings.Read

    • Member.Read.Hidden

    • User.Read.All

  • Granting administrator consent: Select Grant admin consent for <tenant name> for the relevant API permissions.

  • Creating a client secret: Create a new client secret. Copy the secret directly to the clipboard to paste the secret in the Groupware app afterward.

  • Determining the application ID and the directory ID: Copy the IDs from the app registration overview of the Groupware app to the clipboard to paste them to the Groupware app later.

Additionally, create an access policy for the Groupware app in Microsoft 365. For more information, see the following article in our knowledge base: https://kb.d-velop.de/s/article/000001683

You then need to adjust the corresponding settings in the Groupware app for authentication with OAuth 2.0.