How to: Using Exchange Online with OAuth to synchronise emails

Requirements

• Exact Globe+ or Exact Compact+ 500SP7 or 501SP1 from 15 December 2022 or newer.
• Exact Globe Next or Exact Compact 422SP14, 423SP7, or 424SP1 from 9 December 2022 or newer.
• Exact Synergy Enterprise 267SP14, 500SP7 or 501SP1 from 15 December 2022 or newer.
  
• Exact Lightweight Integration Server (ELIS) for product update 267SP14, 500SP7 or 501SP1 from 5 December 2022 or newer.

Exact software can integrate with Exchange Online services to synchronise emails. This document guides you on how to ensure a successful integration. You can also synchronise Exchange appointments. For more information, see How to: Using Exchange Online with OAuth to synchronise appointments.

You need Application (client) ID, Directory (tenant) ID, and Client Secret data for Exact Exchange Migration Tool and Exact Lightweight Integration Server (ELIS) solutions. These solution will then access the data in Microsoft Exchange Online. Ensure the following steps are completed before connecting the Exact solutions to the Microsoft Exchange Online application:

1. Register a new App.
2. Define settings to synchronise emails.
3. Obtain the Client ID, Tenant ID, and Client Secret information.
4. Using these information in Exact products for successful Exchange integration for emails.

Register a new App in Microsoft Azure from App registrations

1. Go to https://portal.azure.com.
2. In the Azure services section, click Microsoft Entra ID.
3. On the left panel, click App registrations.
4. Click + New registration.
5. On the Register an application page, define a name for the application and click Register. The application and directory IDs will be shown in the next page in the Essentials section.

Define settings to synchronise emails

1. On the left panel, click API permissions.
2. Click + Add a permission.
3. Click the Microsoft APIs tab, then click Microsoft Graph.
4. Click Delegated permissions and enable the following:
   • OpenId permissions > email, offline_access, openid, and profile.
5. Click Application permissions and enable the following:
   • AccessReview > AccessReview.Read.All
   • Mail > Mail.Send
6. Click Add permissions after each of the two steps above.
7. If the Status column for the respective API or permission name is blank or it displays “Not granted for the Domain name”, click Grant admin consent for [Domain name].
8. You will see the “Grant admin consent confirmation.” message.
9. Click Yes. The status will be updated to “Granted”.

Note: You can remove Microsoft Graph API from the permission list if it is enabled but you do not use it.

Obtaining Client ID, Tenant ID, and Client Secret information

After creating an application as above, you can retrieve the Client ID and Tenant ID information:

1. Go to https://portal.azure.com.
2. In the Azure services section, click Microsoft Entra ID.
3. On the left panel, click Overview.
4. The Tenant ID is displayed at Directory (tenant) ID, and the Client ID is displayed at Application (client) ID under the Essentials section.

Following this, to create a Client Secret, do the following:

1. On the left panel, click Certificates & secrets.
2. Click + New client secret.
3. Define the description, select the expiry period, and click Add.
   Note: When the client secret expires, you must create a new client secret and enter the new value in your Exact product.
4. The Client secret is displayed in the Value column.
   Note: It is important to note down the client secret at this point because it is only visible after creating it. The client secret will not be displayed again.

You can now use the Client ID, Tenant ID, and Client Secret information.

Define email settings in Exact Globe+, Exact Globe Next, Exact Compact+, and Exact Compact

1. Go to System > General > User settings.
2. Click the Output tab.
3. Select Exchange Online in the E-mail section.
4. At Account under the Sender section, define the e-mail address that will be used for the sender.
5. At Client ID, enter the Client ID from the Azure portal.
6. At Tenant ID, enter the Tenant ID from the Azure portal.
7. At Client Secret, enter the Client secret from the Azure portal.
8. Click Save.

Define email settings in Exact Synergy Enterprise

1. Go to Modules > HRM > Setup > General > Settings.
2. Click Edit.
3. In the Server section at E-mail , select Exchange Online.
4. At Tenant ID, enter the Tenant ID from the Azure portal.
5. At Client ID, enter the Client ID from the Azure portal.
6. At Client Secret, enter the Client secret from the Azure portal.
7. At Sender account (email), define the e-mail address that will be used for the sender.
8. Click Save.

Define email synchronisation settings in Exact Lightweight Integration Server (ELIS)

1. Open Exact Lightweight Integration Server Management (ELIS) Console.
2. Select Settings on the left panel.
3. Select Exchange Online at Server.
4. Type the tenant ID at Tenant ID.
5. Type the application (client) ID at Client ID.
6. Type the client secret at Client secret.
7. Type the sender account email at Sender account.
8. Click Save.