Add the Microsoft Office 365 Connector
Authenticate to Microsoft Office 365
After you add the connector, you need to set the required properties. CData Sync supports authenticating to Microsoft Office 365 in several ways. Select your authentication method below to proceed to the relevant section that contains the authentication details.- Azure Active Directory (default)
- Azure Managed Service Identity
- Azure Service Principal
- Azure Service Principal Certificate
Azure Active Directory
Azure Managed Service Identity
Azure Service Principal
To connect with an Azure service principal and client secret, set the following properties:
- Auth Scheme: Select AzureServicePrincipal.
- Azure Tenant: Enter the Microsoft Online tenant to which you want to connect.
- OAuth Client Id: Enter the client Id that you were assigned when you registered your application with an OAuth authorization server.
- OAuth Client Secret: Enter the client secret that you were assigned when you registered your application with an OAuth authorization server.
To obtain the OAuth client Id and client secret for your application:
- Log in to the Azure portal.
- In the left navigation pane, select All services. Then, search for and select App registrations.
- Click New registrations.
- Enter an application name and select Any Azure AD Directory - Multi Tenant.
- After you create the application, copy the application (client) Id value that is displayed in the Overview section. Use this value as the OAuth client Id.
- Navigate to the Certificates & Secrets section and select New Client Secret for the application.
- Specify the duration and save the client secret. After you save it, the key value is displayed.
- Copy this value because it is displayed only once. You will use this value as the OAuth client secret.
- On the Authentication tab, make sure to select Access tokens (used for implicit flows).
Azure Service Principal Certificate
To connect with an Azure service principal and client certificate, set the following properties:
- Auth Scheme: Select AzureServicePrincipalCert.
- Azure Tenant: Enter the Microsoft Online tenant to which you want to connect.
- OAuth Client Id: Enter the client Id that you were assigned when you registered your application with an OAuth authorization server.
- OAuth JWT Cert: Enter your Java web tokens (JWT) certificate store.
- OAuth JWT Cert Type: Enter the type of key store that contains your JWT Certificate. The default type is PEMKEY_BLOB.
- (Optional) OAuth JWT Cert Password: Enter the password for your OAuth JWT certificate.
- (Optional) OAuth JWT Cert Subject: Enter the subject of your OAuth JWT certificate.
To obtain the OAuth certificate for your application:
- Log in to the Azure portal.
- In the left navigation pane, select All services. Then, search for and select App registrations.
- Click New registrations.
- Enter an application name and select Any Azure AD Directory - Multi Tenant.
- After you create the application, copy the application (client) Id value that is displayed in the Overview section. Use this value as the OAuth client Id.
- Navigate to the Certificates & Secrets section and select Upload certificate. Then, select the certificate to upload from your local machine.
- Specify the duration and save the client secret. After you save it, the key value is displayed.
- Copy this value because it is displayed only once. You will use this value as the OAuth client secret.
- On the Authentication tab, make sure to select Access tokens (used for implicit flows).
Complete Your Connection
To complete your connection:- Specify the following properties:
- Default Groups: Select whether to use the
/me/memberOfor/groupsendpoint for user authentication.- AllUsers: Uses the
/groupsendpoint for user authentication. - (Default) CurrentUser: Uses the
/me/memberOfendpoint for user authentication.
- AllUsers: Uses the
- Default Users:
- (Default) CurrentUser: Uses the
/meendpoint for user authentication. - AllUsers: Uses the
/usersendpoint for user authentication.
- (Default) CurrentUser: Uses the
- Message Content Type: Select the content type that you want to use. The default type is html.
- (Optional) Group Id: Enter a default group identifier (Id).
- (Optional) User Id: Enter a default user Id.
- Default Groups: Select whether to use the
- Define advanced connection settings on the Advanced tab. (In most cases, though, you should not need these settings.)
- Connect to Microsoft Office 365 to connect to your Microsoft Office 365 account.
- Click Create & Test to create your connection.