Add a Microsoft Exchange data source - OAuth2

Requirements

You have installed the Intrexx MediaGateway.

Detailed information on this can be found in section MediaGateway installation.

Step-by-step guide

To add a Microsoft Exchange data source in the Intrexx Portal Manager and set up authentication via OAuth2, please proceed as follows:

Start the "Integration" menu.
Under "Consume data", select "Connector for Microsoft Exchange".
Right-click and select "New data source" from the context menu .

The "New data source - General" dialog box is displayed.

Configure MediaGateway connection
Field descriptions
Connection name

This name will be used to select the connection later in applications.

Host, Port, Time zone

Enter the Host, Port and Time zone for the MediaGateway server.

Generally, the MediaGateway will use port 8087 for connections as well as port 9087 for SSL encrypted connections.

use gRPC instead of COBRA (classic)

If you activate this checkbox, the gRPC framework is used. INTREXX GmbH recommends the use of this option.

If you do not activate this checkbox, the CORBA framework will (continue to) be used.

More information
- https://grpc.io/
- https://www.corba.org/
Use SSL

If you activate this checkbox, the communication between the Media Gateway Server and the Exchange Server is encrypted.

SSL port

Enter the port on the Media Gateway server via which the encrypted connection should take place.

Password / Change password

When creating a new Microsoft Exchange data source, you must enter the password for the Intrexx MediaGateway here. You assigned the password for the Intrexx MediaGateway during the installation.

You should change the default password. You can do this here after the data source has been created.

More information

Configure MediaGateway connection
Click on "Next".

The "New data source - Exchange version" dialog box is displayed.

Select Microsoft Exchange version

Field descriptions

Microsoft Exchange Server version

Select the version of your Exchange Server here. Microsoft Exchange Server 2003 or 2007 and Microsoft Exchange Server 2010 or higher are supported by the Intrexx MediaGateway.

Select the option "Microsoft Exchange Server 2010-2019 or 365" if you are using Microsoft Exchange Online.
Click on "Next".

The "New data source - Authentication" dialog box is displayed.

Select OAuth2 as authentication type
Select "OAuth2 (only with MS365)".

Field descriptions

Exchange user name / Mailbox / Server URL

Click on one of the entries to specify which details should already be pre-assigned when logging on to Microsoft Exchange and which details the user must enter manually.

(Screenshot shows the dialog for configuring the Exchange user name)

Value from web query

Uses the user name that a user enters to the login box of an Intrexx Exchange application.

Static value

Here, a fixed value can be entered that will be automatically entered into the login box when a user wants to log in.

Value from User Manager

Here you can select a field from the "User" module, the value of which is entered in the login box. In this process, Intrexx determines the currently logged-in user and delivers the corresponding data.

Show value on the web

This setting can be set if the "Static value" option or the "Value from user administration" option is selected. This will cause the corresponding value to be shown in the login box on the web when the user logs in.

Administration

Overview of known users

Opens a dialog in which you will find a list of users in the MediaGateway. This link is active if MediaGateway accounts have already been created because users have logged in.

Overview of known users

Opens a dialog in which you will find a list of users in the MediaGateway. This link is active if MediaGateway accounts have already been created because users have logged in.

Query login data session-based on the web

This checkbox is not relevant for the authentication type "OAuth2 (only with MS365)".
Click on "Next".

The "New data source - Exchange account" dialog box is displayed.

Enter access data and OAuth2 data
Field descriptions
User name / Password

Enter the login details to a user inbox created on the Microsoft Exchange server. The account requires no special permissions. The Connector for Microsoft Exchange will use this account to query meta-information from the Exchange server, which will then be available when creating applications, and delivers information about data fields, field types, and existing tables.

Email

Enter the name of the Exchange inbox or the email address. Make sure to use the primary inbox address. When using alias addresses, the functionality of the connector may be limited.

Server (URL)

Enter the URL of the Microsoft Exchange server here that assumes the Client Access role (e.g. the OWA server).

The Exchange Server can be a server that you host yourself or on Microsoft Exchange Online.

Example
- Self-hosted Exchange Server from Exchange 2010 onwards
  
  https://mailserver.meinefirma.de/ews/Exchange.asmx
  
  As a rule, the URL begins with the https protocol, followed by the fully qualified server name and /ews/Exchange.asmx (from Exchange 2010).
- Microsoft Exchange Online
  
  https://outlook.office365.com/ews/Exchange.asmx
MS365 OAuth2 configuration

You must enter the details from Microsoft Azure in this area.

Tenant ID

Enter the Tenant ID here. You can find this in Microsoft Azure in the "Directory ID (client)" field ().

Client ID

Enter the application ID (client ID) here. You can find this in Microsoft Azure in the "Application ID (Client ID)" field ().

Client secret

Enter the value (!) of the client secret here. You can find this at Microsoft Azure under the menu item "Certificates & Secrets". Detailed information on this can be found in section Create client secret.

Redirect URI

The redirect URI is composed as follows:

<base URL>/oauth2/token/msexchange

The redirect URL for the base URL "https:/exampleportal.com/" looks like this:

https:/exampleportal.com/oauth2/token/msexchange

Note The basic URL can be found in the main menu under "Portal > Portal properties".

Request MS365 refresh token

To log in to Microsoft Exchange, you need what is known as an access token. This is generated automatically when you log in to Microsoft Exchange. Access Tokens are only valid for approx. 1 hour for security reasons. A new Access Token is then generated automatically.

This is done with the help of the so-called refresh token. You must request the refresh token manually in the connector for Microsoft Exchange on the "Exchange account" tab for the user that you use when creating the data source ().

You must also do this for the additional users that you use in applications and processes ().

The refresh token is stored in the MediaGateway. It is valid for 3 months. It must then be requested again manually.

Detailed step-by-step instructions for requesting an MS365 Refresh Token can be found in section Request MS365 refresh token (update token).
Click on "Next".

The "New data source - Additional users" dialog box is displayed.

Assign additional users

In this dialog, you can assign Intrexx users to an Exchange user.
Step-by-step instructions
Step-by-step guide

To assign an Intrexx user to an Exchange user, proceed as follows:
1. Click on (Add)
  
  The "User assignment" dialog box is displayed.
2. Click on (select user).
3. Select the desired user in the subsequent dialog.
4. Specify the corresponding information. (See the "New data source - Exchange account" dialog box above)
5. Request an MS365 refresh token.
  
  Detailed step-by-step instructions for requesting an MS365 Refresh Token can be found in section Request MS365 refresh token (update token).
6. Click on "OK".
  
  You return to the "New data source - Additional users" dialog box.
Click on "Next".

The "New data source - connection test" dialog box is displayed.

Perform connection test
Click on the individual connection tests.

If the connection tests are successful, the dialog box looks like this.
Click on "OK".

You will return to the "Design" module.

The newly created data source is displayed.