Setup
Connect to your Microsoft 365 app for OAuth.
To setup your Microsoft 365 app in Cobalt for OAuth, you will need the following credentials from your Microsoft Azure account:
- Client ID
- Client Secret
- Scopes
Pre-requisites
- Microsoft Azure Account. You can create one here.
Required Settings
- Mandatory Scopes
- User.Read
- offline_access
- User.ReadBasic.All
- User.ReadWrite
- Directory.Read.All
- Directory.ReadWrite.All
- User.Read.All
- User.ReadWrite.All
- Group.Read.All
- Group.ReadWrite.All
- Mail.Read
- Mail.ReadWrite
- Calendars.Read
- Calendars.ReadWrite
Creating an app in Microsoft Azure
To create a Microsoft 365 app and aquire the above mentioned credentials, please follow the steps mentioned below:
- Log in to your Microsoft Azure account.
- Search for Microsoft Entra ID and select it from Services in the top search bar.
- Navigate to
Overview
in the side menu > Click on+Add
> SelectApp Registration
. - Enter the App Name for your application and select
Accounts in any organizational directory (Any Microsoft Entra ID tenant - Multitenant)
under Supported Account Types. - Go to your
Apps catalog
in Cobalt > Search forMs365
>Settings
>Use your credentials
>Callback Url
> Copy it. - Under the Redirect URI section, select Platform as
Web
, paste the Callback Url as the URL and clickRegister
.
If you already have an app created, then follows these steps to add Redirect URL:
Select your Application > Select Authentication in side menu > Under Platform configurations, press the Add a platform button > Select Web > Paste the Callback Url > Click on Configure > Click Save button at the bottom.
- Navigate to
Manage
>API permissions
in the side menu > Click on+ Add a permission
. - Choose the
Microsoft Graph
card under Microsoft APIs > ChooseApplication permissions
> Select the mandatory scopes > click on theAdd Permissions
button.Offline_access scope will be present under Delegated permissions in Microsoft Graph
- Navigate to
Certificates and Secrets
in the side menu and under Client Secrets tab, press the+ New client secret
button. Give a Description, select the best expiry for your application and clickAdd
to create your credentials. - Copy the displayed Client Secret under the
Value
column.
- Navigate to
Overview
in the side menu >Essentials
tab > Copy the Client ID underApplication (client) ID
.
Configuring credentials in Cobalt
App settings page lets you configure the authentication settings for an OAuth2
based application. For your customers to provide you authorization to access their data,
they would first need to install your application. This page lets you set up your application credentials.
Cobalt lets you use pre-configured applications to play around. You can do so by selecting Use our credentials
. However, if you wish to use your own application,
select Use your own credentials
. Provide the aquired Client Id and Client secret and save it.
Configuring Scopes
Cobalt lets you configure what permissions to ask from your users while they install your application. The scopes can be added or removed from the App settings page, under Permissions & Scopes
section.
For some applications Cobalt sets mandatory scopes which cannot be removed. Additional scopes can be selected from the drop down. Cobalt also has the provision to add any custom scopes supported by the respective platform.
Once the scopes has been added to the application in Cobalt, go to your Microsoft Azure account and update the scopes as added on Cobalt.
Select the OAuth App created for Cobalt and follow Step 7 and 8 above.
If you are facing scopes missing or invalid scope error. Make sure you are not passing any custom scope not supported by the platform. And, the scopes selected here are identical to the ones selected in the platform.
Actions and triggers
Once the above setup is completed, you can create orchestrations of your use-cases using Microsoft 365 actions and triggers. Following are the set of Microsoft 365 actions and triggers supported by Cobalt.