Office365 Service Authentication

This document describes how to allow Office365 API's server-to-server access for emakin rest clients.

Creating Service Account

Before allowing access you need to register emakin as an application. This step is already configured for cloud configuration and is required only for on-premises.

1. Login to https://apps.dev.microsoft.com

2. Select the type of an application as a "Web"

3. Enter the name of the application (ex: emakin)

4. Enter callback paths as following addresses

   1. https://oauth.emakin.com/oauth/callback

   2. http://mydomain.emakin.com/oauth/callback

5. Create a new application secret by clicking on "Generate New Key Pair"

6. Download the generated PFX file.

Configuring Emakin for Office365 Integrated Service

1. Login into Host Administration Panel panel.

2. Locate the "Integrated Services" from application settings.

3. Add a new service that uses the "Office365" service type.

4. Specify the name of this integration (Ex. Service_Office365)

5. Expand the row details.

6. Enter the "Client Id" and leave "Client Secret" empty.

7. Enter the "Service Account Id" you generated in service account.

8. Select "Service Account Key Type" field as following;

   1. If you don't have local access to the server you can also specify with: 

      1. BASE64;<CertificateBase64>;<CertificatePassword>

      2. URL;<CertificateFileUrl>;<CertificatePassword>

Configuring Emakin for One Drive for Business Integration

1. Login in to Host Administration Panel panel.

2. Locate the "Other Services" from application settings

3. Add new file service that using "Office 365" client type with Office365 integration service.

4. Enter "File.ReadWrite.All Sites.ReadWrite.All" in scope setting.

5. If you want to allow offline access to OneDrive API without user interaction, please  add the "offline" scope with space seperated.

Related articles