This article is deprecated. A newer version on how to setup the integration with Microsoft Graph can be found in the following article.

This article describes the necessary steps to configure an Outlook/Office 365 account in the epowerhr esuite.

This configuration can be used to:

• Synchronize the pictures in (Azure) Active Directory;
• Send Outlook Meeting Requests in the Training module.

Prerequisites

To enable the Outlook/Office 365 account, the following conditions should be valid:

1. You have a valid user account and password.
2. The user is linked to a full mailbox/e-mail address (note: this can't be an Office365 Kiosk user)
3. Autodiscover is enabled for the domain linked to this e-mail address (e.g. company.com) - also see Notes below.
4. The Outlook/Exchange Web Services are public available so that our application can access them
5. Make sure that you have access to the "Remote accounts" section in the Admin.

Steps

First login to the epowerhr esuite and go to the "Remote accounts" in the Admin section.

• Click on "Add remote account"
• Change the type to "Microsoft Graph"

On this page, fill in the following fields:

• Name: just fill in a meaningful name that you can recognize
• Username: this should be the e-mail address that you will use to send the Outlook invitations
• Password: fill in the password

Once you save or change something to the user, you should grant permission for this user to communicate with our epowerhr application to send Outlook Meeting requests through Microsoft Graph.

Follow the next steps:

• An extra field "Give consent" will appear. Click on the button "Select account".
• The Microsoft login page will appear. Login with the same user that you have just created as a "remote account". 
• Next a screen will appear requesting the following permissions:
  • Read all users' basic profiles
  • Have full access to your calendars
  • Sign in as you
  • Maintain access to data you have given it access to
  • View your email address
• Click on "Accept" - note: do not check "Consent on behalf of your organization"
• Depending on the configuration of your organization, it could be that another user with admin permissions has to approve your request.

Notes:

Do not activate the checkbox "Consent on behalf of your organization"

You should not activate the checkbox "Consent on behalf of your organisation" because then we will also get access to all mailboxes inside your organization.

Check if you can access the webmail

If you have troubles using the Outlook/Office 365 account, first check if you can access the webmail with the provided credentials. For Office 365 the URL for the webmail is https://mail.office365.com.