Sending emails using Exchange Online with OAuth

Requirements

• Exact Globe+ or Exact Compact+ 500SP7 or 501SP1 from 15 December 2022 or newer.
• Exact Globe Next or Exact Compact 422SP14, 423SP7, or 424SP1 from 9 December 2022 or newer.
• Exact Synergy Enterprise 267SP14, 500SP7 or 501SP1 from 15 December 2022 or newer.
  
• Exact Lightweight Integration Server (ELIS) for product update 267SP14, 500SP7 or 501SP1 from 5 December 2022 or newer.

Exact software can integrate with Exchange :Online services to synchronise things such as emails and calendar items. This document guides you on how to ensure a successful integration. You can:

• Obtain Application (client) ID, Directory (tenant) ID, and Client Secret information
• Define settings to synchronise calendar items
• Define settings to synchronise emails

Creating application ID in Microsoft Azure for Microsoft Exchange Online

You need Application (client) ID, Directory (tenant) ID, and Client Secret data for use with Exact Exchange Migration Tool and Exact Lightweight Integration Server Management (ELIS) solutions to access data in Microsoft Exchange Online. Ensure the following steps are completed before connecting the Exact solutions to the Microsoft Exchange Online application:

1. Register a new App.
2. Configure authentication for your App.
3. Configure security requirements to obtain Client secret.
4. Define settings to synchronise calendar items.
5. Define settings to synchronise emails.
6. Obtain the application ID and directory ID.

Register a new App in Microsoft Azure from App registrations

1. Go to https://portal.azure.com.
2. In the Azure services section, click Microsoft Entra ID.
3. On the left panel, click App registrations.
4. Click + New registration.
5. On the Register an application page, define a name for the application and click Register. The application and directory IDs will be shown in the next page in the Essentials section.

Configure authentication for your App

1. On the left panel, click Authentication in the Manage section after the above steps have been completed.
2. Under the Web section, click Add URI.
3. Specify the address at the available field.
4. In the Implicit grant and hybrid flows section, select the Access tokens check box.
5. Click Save.
6. Next, click Add a platform in the Platform configurations section. The Configure platforms panel will be displayed.
7. Click Mobile and desktop applications. Select the https://login.microsoftonline.com/common/oauth2/nativeclient checkbox.
8. Click Configure then click Save at the bottom of the page.

Configure security requirements

1. On the left panel, click Certificates & secrets.
2. Click + New client secret.
3. Define the description, select the expiry period, and click Add.
   Note: When the client secret expires, you must create a new client secret and enter the new value in your Exact product.
4. The Client secret is displayed in the Value column.
   Note: It is important to note down the client secret at this point because it is only visible after creating it. The client secret will not be displayed again.

Define settings to synchronise calendar items

1. On the left panel, click API permissions.
2. Click + Add a permission.
3. Click the APIs my organization uses tab
4. and search for office 365 exchange in the filter field.
5.  Select Office 365 Exchange Online.
6. Click Application permissions and enable the following:
   • Other permissions > full_access_as_app
7. Click Add permissions.
8. If the Status column for the respective API or permission name is blank or it displays “Not granted for the Domain name”, click Grant admin consent for [Domain name].
9. You will see the “Grant admin consent confirmation.” message.
10. Click Yes. The status will be updated to “Granted”.

Note: You can remove Microsoft Graph API from the permission list if it is enabled but you do not use it.

Define settings to synchronise emails

1. On the left panel, click API permissions.
2. Click + Add a permission.
3. Click the Microsoft APIs tab, then click Microsoft Graph.
4. Click Delegated permissions and enable the following:
   • OpenId permissions > email, offline_access, openid, and profile.
5. Click Application permissions and enable the following:
   • AccessReview > AccessReview.Read.All
   • Mail > Mail.Send
6. Click Add permissions after each of the two steps above.
7. If the Status column for the respective API or permission name is blank or it displays “Not granted for the Domain name”, click Grant admin consent for [Domain name].
8. You will see the “Grant admin consent confirmation.” message.
9. Click Yes. The status will be updated to “Granted”.

Note: You can remove Microsoft Graph API from the permission list if it is enabled but you do not use it.

Obtain the application ID and directory ID

1. After completing the steps above, click Overview on the left panel.
2. The Tenant ID is displayed at Directory (tenant) ID, and the Client ID is displayed at Application (client) ID under the Essentials section.

Define settings in Exact Globe+, Exact Globe Next, Exact Compact+, and Exact Compact

1. Go to System > General > User settings.
2. Click the Output tab.
3. Select Exchange Online in the E-mail section.
4. At Account under the Sender section, define the e-mail address that will be used for the sender.
5. At Client ID, enter the Client ID from the Azure portal.
6. At Tenant ID, enter the Tenant ID from the Azure portal.
7. At Client Secret, enter the Client secret from the Azure portal.
8. Click Save.

Define settings in Exact Synergy Enterprise

1. Go to Modules > HRM > Setup > General > Settings.
2. Click Edit.
3. In the Server section at E-mail , select Exchange Online.
4. At Tenant ID, enter the Tenant ID from the Azure portal.
5. At Client ID, enter the Client ID from the Azure portal.
6. At Client Secret, enter the Client secret from the Azure portal.
7. At Sender account (email), define the e-mail address that will be used for the sender.
8. Click Save.

Define email synchronisation settings in Exact Lightweight Integration Server (ELIS)

1. Open Exact Lightweight Integration Server Management (ELIS) Console.
2. Select Settings on the left panel.
3. Select Exchange Online at Server.
4. Type the tenant ID at Tenant ID.
5. Type the application (client) ID at Client ID.
6. Type the client secret at Client secret.
7. Type the sender account email at Sender account.
8. Click Save.

Define synchronisation settings for calendar items in Exact Lightweight Integration Server (ELIS)

1. Open Exact Lightweight Integration Server Management (ELIS) Console.
2. Select Solutions on the left panel followed by Exchange Synchronization.
3. Type the application (client) ID at AppID (Exchange Online).
4. Type the tenant ID at TenantID (Exchange Online).
5. Type the client secret at Client Secret (Exchange Online).
6. Click Save.