How to configure Outlook OAuth for Email Integration Plugin

Outlook OAuth is a safe and secure way to connect Email Integration Plugin to Microsoft Exchange Online (Office 365) account. This article will describe how to do that step-by-step.

•  Open Microsoft Azure Portal and click on +New registration.

  Give your application a name, for example, “Email Integration”. As Supported account types choose the second option - "accounts in organizational directory and personal accounts". Specify Redirect URI  as

  https://{account}.tpondemand.com/Admin/Plugins.aspx

  where {account}.tpondemand.com is your Targetprocess URL.

• Go to API permissions section. Click on +Add a permission, then in the next window select Microsoft Graph.

  Select “Delegated permissions” and then tick checkboxes for the next permissions: User.Read, email, offline_access, openid, profile, IMAP.AccessAsUser.All and POP.AccessAsUser.All.

  After you add them your window with granted permissions will look like in the screenshot below.

  Please also make sure that "Access tokens" flag is disabled in the Authentication settings:

• Let's go to Overview section and copy Application (client) ID from there.

  Now open Credentials & secrets section and  click on +New client secret, add any Description there, and set the Expiration date to Never.

  After you add it make sure that you copy the value of this Client secret somewhere.

• Now open your Targetprocess account and go directly to Settings >Plugins > Project Email Integration. You can create a new one or use the existing profile. In the configuration you need to choose Outlook OAuth in Secure access method dropdown. After it's done you can fill out Client id and Client secret values with the ones you got in the previous step. POP and IMAP protocols are both supported in Office 365 Oauth configuration now.

Then you can click Sign in and choose from one of three options available here. In case you need to get admin's approval, choose option Consent.

This will lead you to the page where such approval can be asked for.

• In case no permissions from admin are needed and you are already logged in, choose No Prompt option, login with email you've configured your application for and confirm that you want to give permissions for this app to access your mailbox.

  Finally, if you need to switch between different accounts, choose Select account option.

  Afterward, in the Email Integration profile page you will see green Sign out button and your email next to Client id. You can also double-check that everything is ok by pressing Check connection and getting the response "Connection was established successfully".

That's it! Now your Email Integration Plugin is connected to the mailbox using Outlook OAuth.