Microsoft 365

Configuration

There are several Microsoft 365 resources that ReportWORQ can leverage, such as SharePoint, Teams, Email, and Authentication. To simplify the configuration required to leverage these services ReportWORQ provides a single place to manage this configuration. In order to leverage these services the IT administrator responsible for Microsoft Azure will need to create an Azure App Registration and then enter a Client ID, Tenant ID and Secret value in the ReportWORQ Microsoft 365 section.

Azure App Registration

This step should be performed by the Microsoft Azure IT Administrator

To use Microsoft 365 Authentication with ReportWORQ you must first perform these steps in Microsoft Azure.

• Log into your Azure tenant and create a new App Registration

• Provide a name for the Application and choose the appropriate API access

  • Most users will choose Accounts in this organizational directory only.

  • Do not provide a Redirect URI in this step

  • Record the Application (Client) ID, and Directory (tenant ID) from the Overview screen for ReportWORQ configuration.

• Choose Certificates & secrets from the left pane

  • Create a new client secret with a description and expiry date

  • Set a reminder to create a new secret and update ReportWORQ before it expires

  • Important! Record the Secret Value (not the Secret ID) for use in the ReportWORQ configuration

• Choose Authentication from the left pane

  • Choose Add a Platform and select Web 

    • Note that selecting any platform other than Web will not work properly

  • Select the option to enable Access Tokens

  • Enter the following redirect URLs:

    • http://localhost:8300/signin-oidc

    • http://localhost:8300/server/v0/get-office365-smtp-token

    • http://localhost:8300/server/v0/get-office365-sharepoint-token

• Choose API Permissions, select Microsoft Graph and Delegated permissions and add the following permissions

• Choose Add permissions to save changes

• The following information should be provided to the ReportWORQ administrator to complete the configuration: Client ID, Tenant ID, Secret Value

Minimum Permissions

The minimum permissions required by ReportWORQ to access SharePoint email distribution and user authentication are the following:

• offline_access

• Sites.Read.All

• Sites.ReadWrite.All

• Files.ReadWrite.All

• SMTP.Send

• User.Read

• User.ReadBasic.All

Note:

The "Sites.ReadWrite.All" permission doesn't grant users access to all SharePoint sites; it grants access only to those sites to which the users have been explicitly added. When a user's credentials are entered for Microsoft 365 authentication in ReportWORQ, the effective permissions for that user are the overlap between the API permissions and their personal ones. The sites made available to a given user depend on that user's granted permissions.

Microsoft 365 Configuration

This step should be performed by the ReportWORQ Administrator

To configure Microsoft 365 enabled services in ReportWORQ you must first provide the necessary provider settings and then authenticate with Microsoft 365.

• Enter the Tenant Id, Client Id and Secret value

• Choose Authenticate... under the Graph API section and authenticate with Microsoft 365

• Choose Authenticate... under the Outlook API section and authenticate with Microsoft 365

Microsoft 365 Services

This step should be performed by the ReportWORQ Administrator

With the Azure App Registration created and the ReportWORQ Microsoft 365 configuration applied and authentication, you can now begin to leverage Microsoft 365 for the following services.

• Authentication

  • Microsoft Entra Authentication Provider

• Report Providers

  • SharePoint

• Distributors

  • Email

  • SharePoint

  • Teams

• Data Collection

  • Email