Configuring Microsoft OAuth for Wizlink
To use Microsoft Authentification and log in to a Microsoft account with Wizlink, you need to complete the following steps:
- Create an internal (single tenant) application in Azure Active Directory
- Authorize access through the Admin panel
- Input Application and Tenant IDs in Wizlink's email Activity
1. Create an Azure Active Directory application
Log in to https://portal.azure.com/#home with an account in the same organization as target email and choose Azure Active Directory from the menu. Next choose App Registration.
![mOauth1 mOauth1](https://docs-2.wizlink.eu/wp-content/uploads/2024/05/mOauth1.png)
Choose the New Registration option.
![mOauth2 mOauth2](https://docs-2.wizlink.eu/wp-content/uploads/2024/05/mOauth2.png)
Fill in the name of your application, but leave the rest of the fields as default. Then click on Register.
![mOauth3 mOauth3](https://docs-2.wizlink.eu/wp-content/uploads/2024/05/mOauth3.png)
If the site goes back to the main page, go back to Azure Active Directory -> App Registration. You should now see your new application on the list.
Click on application name to go to application management.
![mOauth4 mOauth4](https://docs-2.wizlink.eu/wp-content/uploads/2024/05/mOauth4.png)
2. Create an authentication token
To create an authentication token click on Certificates & secrets.
![mOauth5 mOauth5](https://docs-2.wizlink.eu/wp-content/uploads/2024/05/mOauth5.png)
Choose New Client Secret. In new window on the right provide description and expiration time (how long until this step needs to be repeated in order to generate a new valid token). Confirm with Add.
3. Verify Authentication settings
Go to the Authentication tab and verify that the Allow public client flows option is on. Make sure the slider is set to Yes.
![mOauth6 mOauth6](https://docs-2.wizlink.eu/wp-content/uploads/2024/05/mOauth6.png)
Under Platform configurations click on Add a platform. From the newly opened window pick Mobile and desktop applications.
![mOauth7 mOauth7](https://docs-2.wizlink.eu/wp-content/uploads/2024/05/mOauth7.png)
You will be prompted to pick a Redirect URI. Check the box next to https://login.microsoftonline.com/common/oauth2/nativeclient and confirm your choice with Configure.
![mOauth8 mOauth8](https://docs-2.wizlink.eu/wp-content/uploads/2024/05/mOauth8.png)
Click on the Overview tab in the left hand menu and copy values next to Application (client) and Directory (tenant) ID. You will need to fill in these values in Wizlink activity.
![mOauth9 mOauth9](https://docs-2.wizlink.eu/wp-content/uploads/2024/05/mOauth9.png)
3. Add API Permissions
Click on the API permissions tab and click Add a permission. Out of the window on the right choose Microsoft Graph.
![mOauth10 mOauth10](https://docs-2.wizlink.eu/wp-content/uploads/2024/05/mOauth10-195x300.png)
![mOauth11 mOauth11](https://docs-2.wizlink.eu/wp-content/uploads/2024/05/mOauth11.png)
Choose Delegate permissions and using the search bar assign the following permissions:
- offline_access
- SMTP.Send
- User.Read
Confirm your choices with Add permissions.
![mOauth12 mOauth12](https://docs-2.wizlink.eu/wp-content/uploads/2024/05/mOauth12.png)
Go back to the Request API permissions window and click on the APIs my organization uses tab.
Search for Office 365 Exchange Online.
![mOauth13 mOauth13](https://docs-2.wizlink.eu/wp-content/uploads/2024/05/mOauth13.png)
Choose Application permissions and add permissions for
- IMAP.AccessAsApp
- POP.AccessAsApp
before once more confirming with Add permissions.
After all the API permissions have been added they still need to be approved by clicking on Grant admin consent.
If the option is grayed out on the screen your user account does not have sufficient permissions. Contact someone within your organization with an Azure Active Directory administrator account to complete this step.
![mOauth14 mOauth14](https://docs-2.wizlink.eu/wp-content/uploads/2024/05/mOauth14.png)
4. Filling out activity parameters
All Wizlink Email activities contain an OAuth section.
Check the Use OAuth checkbox, set the Provider to Microsoft and fill out the Application ID and Tenant ID fields with data copied over from the newly created application.
Note that the Client Secret field should remain blank.
![mOauth15 mOauth15](https://docs-2.wizlink.eu/wp-content/uploads/2024/05/mOauth15.png)