Configuring OAuth for Microsoft Graph API

This document explains how to configure OAuth authentication for Microsoft Graph API by registering an application in Microsoft Azure and integrating the credentials with Applications Manager. The configuration involves the following steps:

1. Registering an application in Azure
2. Capturing application credentials
3. Generating a client secret
4. Configuring API permissions
5. Integrating OAuth settings in Applications Manager

1. Register an Application in Azure

To enable OAuth authentication, you must first register your application in the Azure portal.

1. Log in to the Azure portal.
2. Navigate to App registrations → New registration.
3. Enter a Name of your choice for your application.
4. Choose the appropriate Supported account types based on your organization requirements.
5. Configure Redirect URI depending on the OAuth grant type:
   • Client Credentials: Leave this field blank.
   • Authorization Code / Resource Owner Credentials: Select Web and paste your application's Redirect URL.
6. Click Register to create the application.

2. Capture Application Credentials

After registering the application, collect the required credentials.

1. Navigate to the Overview page of the registered application.

2. Copy the Application (Client) ID. This will be used as the Client ID in Applications Manager.

   

3. Click Endpoints at the top.

4. Copy the OAuth 2.0 Authorization Endpoint (v2) and OAuth 2.0 Token Endpoint (v2). These values will be used as the Authorization URL and Token URL in Applications Manager.

   

3. Generate a Client Secret

A client secret is required for OAuth authentication.

1. In the left navigation panel, go to Certificates & secrets → New client secret.
2. Provide a name for the secret in Description and select an appropriate expiration period.
3. Click Add.
4. Copy the Value of the client secret. This value will be required when configuring OAuth in Applications Manager.

Note: The client secret value is displayed only once. Make sure to copy and store it immediately.

4. Configure API Permissions

Permissions must be configured depending on the OAuth grant type used.

1. Navigate to API Permissions → Add a permission.

2. Select Microsoft Graph.

   

3. Assign permissions based on the grant type:
   • Authorization Code / Resource Owner Credentials: Choose Delegated permissions, then search and select Mail.Send.
   • Client Credentials: Choose Application permissions, then search and select Mail.Send.

4. Click Add permissions.

   

5. Click Grant admin consent for [Organization Name] and confirm by selecting Yes.

   

Note: Ensure the permission status shows a green checkmark, indicating that admin consent has been successfully granted.

5. Integrating OAuth Settings in Applications Manager

After completing the Azure configuration, add the OAuth provider in Applications Manager.

1. Log in to Applications Manager.
2. Navigate to Settings → Credential Settings → OAuth Provider → Add OAuth Provider.

3. Enter the configuration details as shown below:

   Field	Value
   OAuth Provider Configuration
   Client ID	Application (Client) ID from the Azure Overview page
   Client Secret	Secret Value from Certificates & secrets (not the Secret ID)
   Authorization URL	OAuth 2.0 Authorization Endpoint (v2)
   Token URL	OAuth 2.0 Token Endpoint (v2)
   OAuth Request Configuration
   Token Request Method	POST Request Body
   Authenticated Request Method	Basic Authentication
   Grant Type Configuration
   Authorization Code	Mail.Send offline_access
   Resource Owner Password Credentials (ROPC)	Mail.Send offline_access
   Client Credentials	.default

4. Click Authorize to complete the configuration.

If the credentials and permissions are configured correctly for Microsoft Graph API, the OAuth provider will be successfully added in Applications Manager.