Add a Microsoft Exchange Data Source - OAuth2

Requirements

You have installed the Intrexx MediaGateway.

For detailed information on this topic, see the " MediaGateway Installation" section .

Step-by-Step

To add a Microsoft Exchange data source in Intrexx Portal Manager and set up authentication via OAuth2, follow these steps:

Open the "Integration" menu.
Under "Consume Data," select "Connector for Microsoft Exchange."
Right-click and select "New Data Source" from the context menu under " ."

The "New Data Source - General" dialog box appears.

Set Up a Media Gateway Connection
Field Descriptions
Connection Name

You can use the name you enter here to select the connection later in applications.

Host, Port, Time Zone

Enter the host, port, and time zone of the MediaGateway server here.

Typically, the MediaGateway uses port 8087 for connections and port 9087 for SSL-encrypted connections.

Use gRPC instead of COBRA (classic)

If you select this checkbox, the gRPC framework will be used. INTREXX GmbH recommends using this option.

If you do not select this checkbox, the CORBA framework will (continue to) be used.

More Information
- https://grpc.io/
- https://www.corba.org/
Use SSL

If you select this check box, communication between the Media Gateway Server and the Exchange Server will be encrypted.

SSL port

Enter the port on the media gateway server through which the encrypted connection should be established.

Password / Change Password

When creating a new Microsoft Exchange data source, you must enter the password for the Intrexx MediaGateway here. You set the password for the Intrexx MediaGateway during installation.

You should change the default password. You can do this here after the data source has been created.

More Information

Set Up a Media Gateway Connection
Click "Next."

The "New Data Source - Exchange Version" dialog box appears.

Select a Microsoft Exchange version

Field Descriptions

Microsoft Exchange Server Version

Select the version of your Exchange server here. Intrexx MediaGateway supports Microsoft Exchange Server 2003 or 2007 and Microsoft Exchange Server 2010 or later.

Select the "Microsoft Exchange Server 2010–2019 or 365" option if you are using Microsoft Exchange Online.
Click "Next."

The "New Data Source - Authentication" dialog box appears.

Select OAuth2 as the authentication method
Select "OAuth2 (MS365 only)."

Field Descriptions

Exchange username / Mailbox / Server URL

Click one of the entries to specify which fields should be pre-filled when logging in to Microsoft Exchange and which fields the user must enter manually.

(The screenshot shows the dialog box for configuring the Exchange username.)

Value from a web query

Uses the username that a user enters in the login box of an Intrexx Exchange application.

Static value

A fixed value can be entered here, which will then be automatically filled in the login box when a user wants to log in.

Value from User Management

Here, you can select a field from the "Users" module whose value will be entered in the login box. In doing so, Intrexx identifies the currently logged-in user and returns the corresponding data.

Display Value on the Web

This setting can be configured when either the "Static Value" option or the "Value from User Management" option is selected. This will then display the corresponding value in the login box on the website when the user logs in.

Administration

List of Known Users

Opens a dialog box containing a list of users in MediaGateway. This link is active if MediaGateway accounts have already been created because users have logged in.

List of Known Users

Opens a dialog box containing a list of users in MediaGateway. This link is active if MediaGateway accounts have already been created because users have logged in.

Retrieving Login Credentials on the Web on a Per-Session Basis

This checkbox is not relevant for the "OAuth2 (MS365 only)" authentication type.
Click "Next."

The "New Data Source - Exchange Account" dialog box appears.

Enter your login credentials and OAuth 2.0 credentials
Field Descriptions
Username, Password

Enter the login credentials for a user mailbox created on the Microsoft Exchange server here. The account does not require any permissions. The Microsoft Exchange connector uses this account to request metadata from the Microsoft Exchange server, which is then available when creating applications and provides information about data fields, field types, or existing tables.

Email

Enter the name of the Exchange mailbox or the email address here. If possible, use a primary email address. When using alias addresses, the connector's functionality may be limited.

Server (URL)

Enter the URL of the Microsoft Exchange server that serves as the Client Access server (e.g., the OWA server) here.

The Exchange Server can be a server that you host yourself or Microsoft Exchange Online.

Example
- Self-Hosted Exchange Server (Exchange 2010 and Later)
  
  https://mailserver.meinefirma.de/ews/Exchange.asmx
  
  Typically, the URL begins with the https protocol, followed by the fully qualified server name and /ews/Exchange.asmx (starting with Exchange 2010).
- Microsoft Exchange Online
  
  https://outlook.office365.com/ews/Exchange.asmx
MS365 OAuth2 Configuration

In this section, you must enter the information from Microsoft Azure.

Tenant ID

Enter the tenant ID here. You can find these in Microsoft Azure in the "Directory ID (Client)" field ().

Client ID

Enter the application ID (client ID) here. You can find this in Microsoft Azure in the "Application ID (Client ID)" field ().

Client Secret

Enter the value (!) of the secret client key here. You can find this in Microsoft Azure under the "Certificates & Secrets" menu item. For detailed information on this, see the section " Generate a secret client key."

Redirect URI

The redirect URI is composed as follows:

<Base URL>/oauth2/token/msexchange

The redirect URL for the base URL "https://exampleportal.com/" is as follows:

https://exampleportal.com/oauth2/token/msexchange

Note: You can find the base URL in the main menu under "Portal > Portal Properties."

Request an MS365 Refresh Token

To log in to Microsoft Exchange, you need what is known as an access token. This is automatically generated when you sign in to Microsoft Exchange. For security reasons, access tokens are valid for only about 1 hour. A new access token will then be generated automatically.

This is done using what is known as a refresh token. You must manually request the refresh token in the Microsoft Exchange Connector on the "Exchange Account" tab for the user you used when creating the data source ().

You must also do this for the additional users you use in applications and processes ().

The refresh token is stored in the MediaGateway. It is valid for 3 months. After that, it must be requested again manually.

For detailed, step-by-step instructions on how to request an MS365 refresh token, see the section Request an MS365 Refresh Token.
Click "Next."

The "New Data Source - Additional Users" dialog box appears.

Assign Additional Users

In this dialog box, you can map Intrexx users to Exchange users.
Step-by-Step Instructions
Step-by-Step

To map an Intrexx user to an Exchange user, follow these steps:
1. Click " "
  
  The "User Assignment" dialog box appears.
2. Click " ."
3. In the next dialog box, select the desired user.
4. Enter the required information. (See the "New Data Source - Exchange Account" dialog box above.)
5. Request an MS365 refresh token.
  
  For detailed, step-by-step instructions on how to request an MS365 refresh token, see the section Request an MS365 Refresh Token.
6. Click "OK."
  
  You will return to the "New Data Source - Additional Users" dialog box.
Click "Next."

The "New Data Source - Connection Test" dialog box appears.

Run a connection test
Click on each connection test.

If the connection tests are successful, the dialog box will appear as shown below.
Click "OK."

You will be taken back to the "Design" module.

The newly created data source is displayed.