Skip to main content

Application permission

This section will introduce the procedure of integration (Application permission) with Microsoft 365. This integration is suggested for the companies who will use ONES for all staff.

Server settings

Getting start

  1. Enter the name of integration for identification of this integration in ONES.

  2. Microsoft 365 service operator mainly is Microsoft. 21Vianet is for Mainland China client.

Create App registrations

  1. For retrieving the directory ID, application ID and client secret, navigate to your Azure Portal AAD tenant's app registrations blade.

  2. Select App registrations and click New application registration:

  1. Enter a name for the app registration. (This is not important for the integration with ONES.)

  2. Go to the Overview and copy the value: Client ID (Application ID) and Tenant ID (Directory ID) into the corresponding fields.

Grant API Permission

  1. Go to API Permissions, click Add a permission, select Microsoft Graph

  2. Click Application permissions

  3. Select the following permissions in Application permissions and click Add permissions

    • Calendars -> Calendars.ReadWrite
    • Group -> Group.Read.All
    • Place -> Place.Read.All
    • User -> User.Read.All
  4. You will see the permissions added to the list but there are a warning Not granted for "Your organization name" in status. You have to click the Grant admin consent for "Your organization name" to confirm the permission.

  5. After that, you should see the permissions are granted successfully.

Create client secret

  1. After the app registration is created, go to Certificates & secrets

  2. Select Client secrets, and click New Client secret.

  3. Enter a name (e.g. Offision Integration) for the client secret, and select the expire time based on your needs.

  4. Click the Add button, and you can get the Client secret immediately after creation. Please copy it at this moment and fill in the field. Otherwise you may need to recreate a new client secret.

Testing

  1. Back to the setting in the right hand side. Click Test settings to test if the information provided is correct.

  2. Click Save and next to continue once the information is confirmed to be correct.

Room settings

Sync room

  1. Select Sync specified room to select the rooms required or Sync all rooms.

  2. Click Save and next to continue.

How to apply the Offision policy to Microsoft 365 room

If you want to apply the Offision policy to O365 room, please click here for more information.

User settings

Redirect URI

  1. Redirect URI is for adding single-sign-on callback-link to Microsoft 365 (Please also add this to the Azure Portal)

  2. Navigate to Authentication, click Add platform, then click Web

  3. Copy the Redirect URI from the right and paste in the Redirect URIs in the Azure Portal AAD tenant. Click Configure

Others

  1. You can set-up the default user groups in ONES for adding newly synchronized users.

  2. You can select Pager in user account as the card number of user in ONES.

  3. You can set the Login button name in the login page.

  4. Click Save and close.