Register the Connector for Microsoft 365 and Teams

Usage

You must register a new Connector for Microsoft 365 and Teams if you want to use the following Intrexx features:

• Microsoft Teams

  In connection with Microsoft Teams, you must register the connector if you want to use the "Create Team/Channel," "Teams Message Action," and "Create Meeting" Microsoft Teams actions (Microsoft Teams process actions).

  If you want to chat and make calls via the Intrexx portal in Microsoft Teams, registration is not required (Microsoft Teams communication)

• Microsoft OneDrive

  You must register the connector if you want to access OneDrive through the "MS365 OneDrive" application control (see MS365 OneDrive Control).

• MS365 Data Group, MS 365 Data Field

  You must register the connector if you want to use an MS365 data group (see " Create an MS365 Data Group") or an MS365 data field (see " Add an MS365 Data Field").

Step-by-Step

To register a Connector for Microsoft 365 and Teams, follow these steps:

1. Open the "Integration" menu.

2. Under "Collaboration," select the option "Connector for Microsoft 365 and Teams."

3. Click the right mouse button.

4. From the context menu, select " New Application Registration."

   The "New Registration - General" dialog box appears.

   New Registration - General

   

   Name

   Enter a name for the collaboration here. The name must be unique for each collaboration you create.

   The name may only contain the letters [a-zA-Z] and the numbers [0-9].

   Redirect URI

   The redirect URI is displayed here. The Redirect URI defines the Intrexx endpoint to which the user is redirected from Microsoft 365 after authorization.

   

   You must configure the redirect URI in Microsoft Azure.

   For detailed information on this topic, see the section " Configure Redirect URIs from Intrexx."

   User schema field for MS365 User Principal Name

   Select here which Intrexx user field is used as the "User Principal Name" in Microsoft 365. This is usually the user's (work) email address. This is also commonly used to sign in to Microsoft services.

   If you are not using the Intrexx user's work email address for this, you should select a different field here that contains the correct information.

   You can also define your own field using the Intrexx Schema Manager and use it for login.

5. Click "Next."

   The "New Registration - Authentication" dialog box appears.

   New Registration - Authentication

   

   In this dialog box, you must enter the authentication information for Intrexx in Microsoft Azure. The required information was generated when you registered Intrexx as an application in Microsoft Azure. You can find them at Microsoft Azure under the "Overview" menu item.

   

   For detailed information on this, see the " Register the app" section.

   Tenant ID

   Enter the tenant ID here. You can find these in Microsoft Azure in the "Directory ID (Client)" field ().

   Application ID (Client ID)

   Enter the application ID (client ID) here. You can find this in Microsoft Azure in the "Application ID (Client ID)" field ().

   Application Secrets (Client Secret)

   Enter the value (!) of the secret client key here. You can find this in Microsoft Azure under the "Certificates & Secrets" menu item. For detailed information on this, see the section " Generate a secret client key."

   Microsoft Graph Permissions (Scope)

   By default, the entry "https://graph.microsoft.com/.default" is preset here. If you leave this entry as is, Intrexx will access Microsoft 365 with all the API permissions you have configured at Microsoft Azure under the "API Permissions" menu item.

   If you want to restrict permissions, you can enter the specific API permissions you want in this field. The individual permissions must be separated by a space.

   For detailed information on this topic, see the section " API permissions for the Connector for Microsoft 365 and Teams."

6. Click "Next."

   The "New Registration - Static User Accounts" dialog box appears.

   New Registration - Static User Accounts

   

   This dialog box displays the Intrexx users to whom you have assigned an Microsoft 365 user. You can create static users to log in to Microsoft 365 via Intrexx.

   You can specify whether you want to log in to Microsoft 365 using static user accounts, service accounts, or through a browser window under the "Login to Portal Manager" menu item (New Registration - Logging In to the Portal Manager).

   a. Click " " to assign an Microsoft 365 user to an Intrexx user.

   b. The "User Assignment" dialog box appears.

   

   Intrexx Users

   Select the Intrexx user here.

   Username

   Enter the login name here that the Intrexx user should use to log in to Microsoft 365.

   Example

   10 Intrexx portal users should be able to log in to Microsoft 365. All portal users should log in to Microsoft 365 using the same (technical) Microsoft 365 account. Create 10 Intrexx users and assign each of them to the (technical) Microsoft 365 user.

   Permissions (Scope)

   By default, the entry "https://graph.microsoft.com/.default" is preset here. If you leave this entry as is, the corresponding user will access Microsoft 365 with all the API permissions you have configured at Microsoft Azure under the "API Permissions" menu item.

   If you want to restrict permissions, you can enter the specific API permissions you want in this field. The individual permissions must be separated by a space.

   For detailed information on this topic, see the section " API permissions for the Connector for Microsoft 365 and Teams."

   c. Click "Finish."

7. Click "Next."

   The "New Registration - Static Service Accounts" dialog box appears.

   New Registration - Service Accounts

   

   This dialog box displays the Intrexx users to whom you have assigned an Microsoft 365 service account.

   To log in to Microsoft 365, you can use static user accounts or service accounts. When logging in with a service account, actions in Microsoft 365 are not performed in the context of a personal user.

   You can specify whether you want to log in to Microsoft 365 using static user accounts, service accounts, or through a browser window under the "Login to Portal Manager" menu item (New Registration - Logging In to the Portal Manager).

   Service accounts can be used to perform any actions for which the permission type is "Application."

   

   In some scenarios, it is helpful or even necessary for Intrexx to log in to Microsoft 365 using a service account. Intrexx must log in to Microsoft 365 using a service account if data from Microsoft 365 is to be displayed in Intrexx. This is the case, for example, when a new Teams channel is to be created via Intrexx, since Intrexx must first determine which channels exist in Teams in order to create a new channel.

   For every application registered at Microsoft Azure, there is a service account at Microsoft Azure.

   When registering the Connector for Microsoft 365 and Teams, this service account is assigned by default to the Intrexx user "System/Administrator."

   a. Click " " to assign an Microsoft 365 service account to an Intrexx user.

   b. The "User Assignment" dialog box appears.

   

   Intrexx Users

   Select the Intrexx user here.

   Client ID

   If the Intrexx user is supposed to log in to the same app as specified in the "New Registration - Authentication" dialog box, you can leave this field blank.

   If the Intrexx user is required to log in to another app, enter the corresponding application ID (client ID) here. You can find these at Microsoft Azure in the "Application ID (Client ID)" field.

   Client Secret

   If the Intrexx user is to log in to the same app as specified in the "New Registration - Authentication" dialog box, you can leave this field blank.

   If the Intrexx user is required to log in to another app, enter the value (!) of the secret client key here. You can find this in Microsoft Azure under the "Certificates & Secrets" menu item.

   Permissions (Scope)

   By default, the entry "https://graph.microsoft.com/.default" is preset here. If you leave this entry as is, the corresponding user will access Microsoft 365 with all the API permissions you have configured at Microsoft Azure under the "API Permissions" menu item.

   If you want to restrict permissions, you can enter the specific API permissions you want in this field. The individual permissions must be separated by a space.

   For detailed information on this topic, see the section " API permissions for the Connector for Microsoft 365 and Teams."

   c. Click "Finish."

8. Click "Next."

   The "New Registration - Log In to Portal Manager" dialog box appears.

   New Registration - Logging In to the Portal Manager

   

   In this dialog box, you can specify how Intrexx should access Microsoft 365 by default.

   Sign in to Microsoft 365 via your browser

   If you select this option, a browser window (pop-up) will appear in which the user must enter the required login credentials.

   If the user is (already) logged in to Microsoft 365, the browser window will not be displayed (anymore).

   

   Please note that this option does not prevent the browser from displaying dialog boxes (pop-ups). If necessary, change the appropriate browser settings.

   Login via a static user account

   Select this option if you want to log in to Microsoft 365 using one of the previously created static user accounts. Select the desired user account.

   Login via work account

   Select this option if you want to log in to Microsoft 365 using one of the service accounts you created earlier. Select the desired service account.

   For more information on the various sign-in methods, see the section " Set the login from Intrexx to Microsoft 365 ."

9. Click "Finish."

   You have registered a Connector for Microsoft 365 and Teams.