You are viewing limited content. For full access, please sign in.

Question

Question

Connection to MS365 for Exchange Web Service

Workflow Version 12
Updated January 29
asked on May 22, 2025 • Show version history

Trying to finish getting Workflow set up to drop items on people's calendars in Exchange Online.

I have an app registration created, a user assigned to the application, Client ID, Tenant ID, Secret...

I have referenced this document Web Services, specifically this part:
 

  • If connecting to a Microsoft 365 Exchange® service, select Use OAuth and provide the credentials necessary for that service:
    • Username: The username of the account associated with the mailbox.
    • Application (client) ID: This is the application ID assigned to your app. The ID can be found in the Microsoft Azure portal.
    • Client secret: The client secret generated for the app in the Microsoft Azure portal.
    • Tenant ID: The directory tenant that granted the app the permissions requested, in GUID format. The ID can be found in the Microsoft Azure portal.
    • Redirect Uri: The destination URI when returning authentication responses (tokens) after successfully authenticating users. Also referred to as reply URLs.

      Note: You must create an app registration within the Microsoft 365 or Azure management portal to obtain the information necessary. When registering for Exchange API access, the Exchange user created for this purpose must have "full_access_as_app" permissions with full access to all mailboxes.

      Note: For Exchange Online, set the URL to https://outlook.office365.com/ews/exchange.asmx, and the redirect URI to https://login.microsoftonline.com/common/oauth2/nativeclient unless otherwise specified by Microsoft.

Currently, when testing the URL, I get a Forbidden response:

Settings look like this:

 

Couldn't find the permission referred to as full_access_as_app, so I grabbed a few permissions that looked like the ability to write to all calendars and also query the profiles.

Workflow is the latest version as of this writing. Also, SharePoint Online web service is working properly.

 

Update:
I have added the user to an admin role in Exchange

 

0 0

Answer

SELECTED ANSWER
replied on May 22, 2025

Hi Michael,

Please go to Azure AD > App registrations > your app > API permissions blade and enter Office 365 Exchange Online in APIs my organization uses, then you can find the "full_access_as_app" in application permissions and add it. 

189711-image.png

0 0
replied on May 23, 2025

Thanks, that's what I was missing.

0 0
replied on January 28

Zihang,

I need to be able to add and update calendar events to one account in our system. Our IT wants us to give them step by step instructions  on how to do it on Azure/ office 365. Would you happen to know any documentation that goes into detail?

 

Thanks,

Victor

replied on January 28

Zihang,

I need to be able to add and update calendar events to one account in our system. Our IT wants us to give them step by step instructions  on how to do it on Azure/ office 365. Would you happen to know any documentation that goes into detail?

 

Thanks,

Victor

0 0
replied on January 29

Hi Victor, 

To manage calendar events, we can use workflow Create Exchange Item and Delete Exchange Item activity.

Currently exchange online only supports OAuth authentication, so we need to use Exchange type of web service using OAuth authentication. Follow workflow 11 online help: Web Services (Note: Workflow supports Exchange web service with OAuth authentication since version 11.0.2)

To configure Exchange web service with OAuth authentication, we need to prepare an application on Microsoft Azure following Microsoft document. 

  1. Create a new application
    1. How to register an app in Microsoft Entra ID - Microsoft identity platform | Microsoft Learn
  2. Add a redirect URL. For Exchange web service on Workflow, select type as "Mobile and desktop applications" and url as "https://login.microsoftonline.com/common/oauth2/nativeclient" 
    1. How to add a redirect URI to your application - Microsoft identity platform | Microsoft Learn
  3. Add client credential. These values will be used in Workflow Exchange web service configuration. 
    1. Add and manage app credentials in Microsoft Entra ID - Microsoft identity platform | Microsoft Learn
  4. Grant permission to the application to make the application have enough access right. 
    1. Add permission "Office 365 Exchange Online" -> "full_access_as_app"
    2. Web API app registration and API permissions - Microsoft identity platform | Microsoft Learn

 

After configuration above is done on Microsoft Azure, go back to workflow and configure Workflow Exchange web service following workflow online help: Web Services

0 0

Replies

You are not allowed to reply in this post.
You are not allowed to follow up in this post.

Sign in to reply to this post.

Details
Related Posts
Loading ...