Microsoft 365 Email

Note

Note: Support for Microsoft 365 is now deprecated. See the Microsoft Entra ID integration documentation instead.

Managing email accounts of other users cannot be done using the standard 1Password SaaS Manager Microsoft 365 integration. Instead it requires an ‘App registration’ configuring in your Entra ID tenant (formerly Azure AD).

There are two parts to configuring the connection - you may need help from an IT admin to complete the first step.

  1. Create credentials in Entra ID (an ‘app’)
  2. Connect SaaS Manager to Microsoft 365 using these credentials.

What can you do with the Microsoft 365 Email integration?

The integration lets you build workflows that set out of office messages for users, as well as configuring email forwarding.

Create a new app in Entra ID

This also involves multiple steps:

  1. Register the basic app details
  2. Assign API permissions
  3. Create credentials

Register the app

  1. Login to Entra ID and find App registrations:

    mceclip0.png

  2. Click New registration.

  3. Enter a name (for example SaaS Manager (Mailbox management))

  4. Choose Accounts in this organizational directory only (Single tenant).

  5. You do not need to enter a Redirect URI - just click Register to continue.

Configuring API permissions

    1. On the API permissions tab, click **Add a permission

      **

    2. Under the Microsoft APIs tab choose Microsoft Graph:

    3. Choose Application permissions search for MailboxSettings.ReadWrite and then tick this:

    4. In a similar way, add User.Read.All

    5. Click Add permissions

    6. Finally, click Grant admin consent:

Create a new secret

  1. Go to Certificates & secrets
  2. Click New client secret
  3. Give the secret a name (for example SaaS Manager) and chose the Expiry duration that you are comfortable with (we recommend 12 or 24 months).
  4. Click Add

Collecting the IDs you need

You need three IDs which you can copy from Entra ID:

  1. From the Certificates & secrets tab copy the Client Secret Value (not the Secret ID)

    The Client Secret Value will only be available for you to copy for a short period of time. If you are unable to view or copy it, then just create new one.

  2. From the Overview tab copy the Application (client ID) and the Directory (tenant) ID

Connect from SaaS Manager

  1. In SaaS Manager, go to Integrations > Microsoft 365 Email
  2. Click Connect and enter the IDs that you gathered earlier.
  3. Click Connect again.
  4. The integration will run in the background. It may take a while with a large number of users. You can come back to it later to check on progress.

Published: