Register connector for Microsoft 365 and Teams

Use

You must (re-)register a Connector for Microsoft 365 and Teams if you want to use the following Intrexx functionalities:

  • Microsoft Teams

    In connection with Microsoft Teams, you must register the connector if you want to use the Microsoft Teams actions "Create team/channel", "Teams message action" and "Create meeting"(Microsoft Teams process actions).

    If you want to chat and make calls via the Intrexx portal in Microsoft Teams, registration is not required(Microsoft Teams communication)

Step-by-step guide

To register a Connector for Microsoft 365 and Teams, proceed as follows:

  1. Start the "Integration" menu.

  2. Select the item "Connector for Microsoft 365 and Teams" under "Collaboration".

  3. Right click.

  4. Select " New application registration" from the context menu.

    The "New registration - General" dialog box is displayed.

    New registration - General

    Name

    Enter a name for the collaboration here. The name must be unique for each collaboration you create.

    The name may only contain the letters [a-zA-Z] and the numbers [0-9].

    Redirect URI

    The redirect URI is shown here. The Redirect URI defines the Intrexx endpoint to which the user is redirected from Microsoft 365 after authorization.

    You must store the redirect URI in Microsoft Azure.

    You can find detailed information on this in the section Store redirect URIs from Intrexx.

    User schema field for MS365 User Principal Name

    Select here which Intrexx user field is used as the "User Principal Name" in Microsoft 365. This is usually the user's (business) email address. This is also commonly used for logging into Microsoft services.

    If you are not using the Intrexx user's business email address, you should select another field here with the correct information.

    You can also define your own field via the Intrexx Schema Manager and use it for the login.

  5. Click on "Next".

    The "New registration - Authentication" dialog box is displayed.

    New registration - Authentication

    In this dialog box, you must enter the information for the authentication of Intrexx at Microsoft Azure. The required information was generated when you registered Intrexx as an application in Microsoft Azure. You can find them at Microsoft Azure under the menu item "Overview".

    You can find detailed information on this in the Register app section.

    Tenant ID

    Enter the Tenant ID here. You can find this in Microsoft Azure in the "Directory ID (client)" field ().

    Application ID (client ID)

    Enter the application ID (client ID) here. You can find this in Microsoft Azure in the "Application ID (Client ID)" field ().

    Client secret

    Enter the value (!) of the client secret here. You can find this at Microsoft Azure under the menu item "Certificates & Secrets". Detailed information on this can be found in section Create client secret.

    Microsoft Graph Permissions (Scope)

    By default, the entry "https://graph.microsoft.com/.default" is preset here. If you leave this entry as it is, Intrexx will access Microsoft 365 with all the API permissions that you have stored in Microsoft Azure under the menu item "API permissions".

    If you want to restrict the authorizations, you can enter the individual API authorizations you require in this field. The individual permissions must be separated by a space.

    Detailed information on this can be found in section API authorizations for the Connector for Microsoft 365 and Teams.

  6. Click on "Next".

    The "New registration - Static user accounts" dialog box is displayed.

    New registration - static user accounts

    The Intrexx users to whom you have assigned a Microsoft 365 user are displayed in this dialog box. You can create static users to log in to Microsoft 365 via Intrexx.

    You can specify whether you log in to Microsoft 365 with static user accounts, service accounts or via a browser window in the "Login to Portal Manager" menu itemNew registration – Login in the Portal Manager).

    a. Click on (Add user) to assign a Microsoft 365 user to an Intrexx user.

    b. The "User assignment" dialog box is displayed.

    Intrexx user

    Select the Intrexx user here.

    Login name

    Enter the login name with which the Intrexx user should log in to Microsoft 365.

    Example

    10 Intrexx portal users should be able to log in to Microsoft 365. The portal users should all log in to Microsoft 365 with the same (technical) Microsoft 365 user. Enter 10 Intrexx users and assign the (technical) Microsoft 365 user to each of them.

    Permissions (scope)

    By default, the entry "https://graph.microsoft.com/.default" is preset here. If you leave this entry as it is, the corresponding user accesses Microsoft 365 with all the API authorizations that you have stored in Microsoft Azure under the menu item "API authorizations".

    If you want to restrict the authorizations, you can enter the individual API authorizations you require in this field. The individual permissions must be separated by a space.

    Detailed information on this can be found in section API authorizations for the Connector for Microsoft 365 and Teams.

    c. Click on "Finish".

  7. Click on "Next".

    The "New registration - Static service accounts" dialog box is displayed.

    New registration - service accounts

    The Intrexx users to whom you have assigned a Microsoft 365 service account are displayed in this dialog box.

    Static user accounts or service accounts can be used to log in to Microsoft 365. When logging in via a service account, actions in Microsoft 365 are not executed in the context of a personal user.

    You can specify whether you log in to Microsoft 365 with static user accounts, service accounts or via a browser window in the "Login to Portal Manager" menu itemNew registration – Login in the Portal Manager).

    Service accounts can be used to execute all actions for which the authorization is of the "Application" type.

    In some scenarios, it is helpful or even necessary for Intrexx to log in to Microsoft 365 via a service account. Intrexx must log in to Microsoft 365 via a service account if data from Microsoft 365 is to be displayed in Intrexx. This is the case, for example, if a new Teams channel is to be created via Intrexx, as Intrexx must first determine which channels exist in Teams in order to create a new channel.

    There is a service account in Microsoft Azure for each application registered in Microsoft Azure.

    When registering Connector for Microsoft 365 and Teams, this service account is assigned to the Intrexx user "System/Administrator" by default.

    a. Click on (Add user) to assign an Intrexx user to a Microsoft 365 service account.

    b. The "User assignment" dialog box is displayed.

    Intrexx user

    Select the Intrexx user here.

    Client ID

    If the Intrexx user should log in to the same app as in the "New registration - Authentication" dialog box, then you can leave this field empty.

    If the Intrexx user should log in to another app, then enter the corresponding application ID (client ID) here. You can find this in Microsoft Azure in the "Application ID (Client ID)" field

    Client secret

    If the Intrexx user should log in to the same app as in the "New registration - Authentication" dialog box, then you can leave this field empty.

    If the Intrexx user should log in to another app, then enter the value (!) of the secret client key here. You can find this at Microsoft Azure under the menu item "Certificates & Secrets".

    Permissions (scope)

    By default, the entry "https://graph.microsoft.com/.default" is preset here. If you leave this entry as it is, the corresponding user accesses Microsoft 365 with all the API authorizations that you have stored in Microsoft Azure under the menu item "API authorizations".

    If you want to restrict the authorizations, you can enter the individual API authorizations you require in this field. The individual permissions must be separated by a space.

    Detailed information on this can be found in section API authorizations for the Connector for Microsoft 365 and Teams.

    c. Click on "Finish".

  8. Click on "Next".

    The "New registration - Login to Portal Manager" dialog box is displayed.

    New registration – Login in the Portal Manager

    In this dialog box, you can define how Intrexx should access Microsoft 365 by default.

    Login to Microsoft 365 via the browser

    If you select this option, a browser window (pop-up) is displayed in which the user must enter the required login data.

    If the user is (already) logged in to Microsoft 365, the browser window is not (no longer) displayed.

    With this option, ensure that the display of dialog boxes (pop-ups) is not suppressed in the browser. If necessary, change the corresponding browser settings.

    Login via a static user account

    Select this option if you want to log in to Microsoft 365 using one of the previously created static user accounts. Select the user account of your choice.

    Login via a service account

    Select this option if you want to log in to Microsoft 365 via one of the previously created service accounts. Select the service account of your choice.

    You can find more information about the different login forms in the section Set login from Intrexx to Microsoft 365.

  9. Click on "Finish".

    You have registered a Connector for Microsoft 365 and Teams.