Configuring a custom app for authenticating with Microsoft 365

Configuring a custom app for authenticating with Microsoft 365

For most cases, we recommend using the native Diggspace app for authenticating with Microsoft 365. If for some reason you need to use a custom App Registration, follow the steps below on how to create it on Entra ID.
Info
The following steps need to be performed by a Microsoft Entra ID admin
  1. Create a new App Registration
  2. Choose a name that is easily identifiable by you
  3. Select Single Tenant
  4. Fill in the Redirect URI
    1. Select Single-page application (SPA)
    2. The value will be: "https://your-diggspace-domain/blank.html"
  5. Click Register

  6. Go to the Manage > API Permissions on the side panel, and click Add a permission:
    1. Select Microsoft Graph > Delegated, and add the following permissions
      1. email – for authentication
      2. offline_access – for authentication
      3. profile – for authentication
      4. Mail.ReadBasic – necessary to indicate the number of emails to read.
      5. Calendars.Read – necessary to indicate the number of calendar events for the day.
      6. Calendars.ReadWrite – to add a Diggspace event to the user's Outlook calendar.
      7. User.Read – To access the user's profile information, to list it on the Diggspace profile page.
      8. User.Read.All – To access the user's profile information, to list it on the Diggspace profile page.
      9. Files.Read – List the user's recent documents.
      10. Group.Read.All – List the user's groups.
      11. Group.ReadWrite.All – Add groups to favorites.
      12. Directory.AccessAsUser.All – To enable access with the user's context.
      13. People.Read - Display frequent contacts
      14. Tasks.Read and Tasks.Read.Shared - Display user Todo and Planner tasks
    2. Application
      1. User.Read.All – Used by a profile import mechanism that runs nightly (synchronizes user photos, which SCIM cannot do).
      2. ExternalConnection.ReadWrite.OwnedBy – Used to make Diggspace content available to Microsoft Search.
      3. ExternalItem.ReadWrite.OwnedBy – Used to make Diggspace content available to Microsoft Search.
  7. Click Grant admin consent
  8. Then go to Manage > Certificates & Secrets in the sidebar and create a new client secret, take note of this secret as you will need to add it to your Diggspace settings.
  9. In the Overview, take note of the Application ID, as well as the Directory (tenant) ID.
  10. Go to your Diggspace portal and navigate to User Management > Authentication through the user menu
  11. In the Microsoft 365 section, select Use custom app option, click the edit button, and input the App ID, App Secret, and Tenant ID saved in steps 8 and 9.
    1. If the Use custom app option is disabled, reach out to your support contact.