How-to: Using Exchange Online with OAuth to synchronise appointments

Requirements

• Exact Globe+ or Exact Compact+ 500SP7 or 501SP1 from 15 December 2022 or newer.
• Exact Globe Next or Exact Compact 422SP14, 423SP7, or 424SP1 from 9 December 2022 or newer.
• Exact Synergy Enterprise 267SP14, 500SP7 or 501SP1 from 15 December 2022 or newer.
  
• Exact Lightweight Integration Server (ELIS) for product update 267SP14, 500SP7 or 501SP1 from 5 December 2022 or newer.

Exact software can integrate with Exchange Online services to synchronise appointments. This document guides you on how to ensure a successful integration. You can also synchronise Exchange emails. For more information, see How to: Using Exchange Online with OAuth to synchronise emails.

You need Application (client) ID, Directory (tenant) ID, and Client Secret data for Exact Exchange Migration Tool and Exact Lightweight Integration Server (ELIS) solutions. These solution will then access the data in Microsoft Exchange Online. Ensure the following steps are completed before connecting the Exact solutions to the Microsoft Exchange Online application:

1. Register a new App.
2. Configure authentication for your App.
3. Define settings to synchronise calendar items.
4. Obtain the Client ID, Tenant ID, and Client Secret information.

Register a new App in Microsoft Azure from App registrations

1. Go to https://portal.azure.com.
2. In the Azure services section, click Microsoft Entra ID.
3. On the left panel, click App registrations.
4. Click + New registration.
5. On the Register an application page, define a name for the application and click Register. The application and directory IDs will be shown in the next page in the Essentials section.

Configure authentication for your App

1. On the left panel, click Authentication in the Manage section after the above steps have been completed.
2. Under the Web section, click Add URI.
3. Specify the address at the available field, for example https://<servername>/Synergy/docs/SysJwtTokenLogin.aspx.
4. In the Implicit grant and hybrid flows section, select the Access tokens check box.
5. Click Save.
6. Next, click Add a platform in the Platform configurations section. The Configure platforms panel will be displayed.
7. Click Mobile and desktop applications. Select the https://login.microsoftonline.com/common/oauth2/nativeclient checkbox.
8. Click Configure then click Save at the bottom of the page.

Define settings to synchronise calendar items

1. On the left panel, click API permissions.
2. Click + Add a permission.
3. Click the APIs my organization uses tab and search for office 365 exchange in the filter field.
4.  Select Office 365 Exchange Online.
5. Click Application permissions and enable the following:
   • Other permissions > full_access_as_app
6. Click Add permissions.
7. If the Status column for the respective API or permission name is blank or it displays “Not granted for the Domain name”, click Grant admin consent for [Domain name].
8. You will see the “Grant admin consent confirmation.” message.
9. Click Yes. The status will be updated to “Granted”.

Note: You can remove Microsoft Graph API from the permission list if it is enabled but you do not use it.

Obtain Client ID, Tenant ID, and Client Secret information

After creating an application as above, you can retrieve the Client ID and Tenant ID information:

1. Go to https://portal.azure.com.
2. In the Azure services section, click Microsoft Entra ID.
3. On the left panel, click Overview.
4. The Tenant ID is displayed at Directory (tenant) ID, and the Client ID is displayed at Application (client) ID under the Essentials section.

Following this, to create a Client Secret, do the following:

1. On the left panel, click Certificates & secrets.
2. Click + New client secret.
3. Define the description, select the expiry period, and click Add.
   Note: When the client secret expires, you must create a new client secret and enter the new value in your Exact product.
4. The Client secret is displayed in the Value column.
   Note: It is important to note down the client secret at this point because it is only visible after creating it. The client secret will not be displayed again.

You can now use the Client ID, Tenant ID, and Client Secret information.