OAuth 2.0 Setup

You will first need to create and configure a new App Registration within your Azure Active Directory tenant. When creating the application, you will be prompted to select the 'Supported account types'. Under this section, be sure to select 'Accounts in any organizational directory (Any Azure AD directory - Multitenant)'.

You will need to go to "Platforms" and add the "Web" platform. In that section you should add Cofactr's OAuth 2.0 callback URL - https://oauth2.integrations.cofactr.com/callback - as a Redirect URI.

Next, go to "Certificates & Secrets" for the app and add a new Client Secret. Note this value, as you will need to supply it to the connection within Cofactr.

You will also need the Application (client) ID from the "Overview" page.

Enable the Integration(s)

Navigate to the Integrations App in Cofactr

Select the Microsoft Outlook integration you would like to enable. You will need to separately enable the integration for Send Email with Outlook and one or more integrations for Receive Email with Outlook if you want bi-directional email capabilities in Cofactr.

For each integration that you enable, you will need to provide the Client Secret and Application (client) ID from the previous step.

If you didn't select Multitenant when creating the Azure application, you will need to replace the Authorize URL and Token URL with ones specific to your tenant.

The following scopes are required:

• https://graph.microsoft.com/User.Read for reading basic user data

• https://graph.microsoft.com/Mail.ReadWrite for managing email

• https://graph.microsoft.com/Mail.Send for sending email

Additional Instructions for GCC High Customers

Whether or not you select Multitenant when creating the Azure application, you will need to replace the Authorize URL and Token URL with ones specific to your tenant.

These will start with https://login.microsoftonline.us/

If they start with https://login.microsoftonline.com/, you are using the wrong URLs.

In the Cofactr integration configuration, make sure to change the scope URLs to .us (they will default to .com)