Update Microsoft O365 integration to MS Id Platform v2

[Gareth Cantrell]

We have the premium iBridge package which includes the Microsoft Office 365 integration which we'd really like to use in our processes.

However, the current integration appears to use Azure Active Directory v1.0 endpoints, which means the integration requests EVERY permission available and not only the permission required for the available operations (ie. calendar, contact and mail).

This is preventing us from using the integration as our SOC team is not okay with granting permissions which are not required.

We therefore are requesting that the integration is updated to use the Microsoft Identity Platform (v2) as in the below note:

https://learn.microsoft.com/en-us/azure/active-directory/azuread-dev/azure-ad-endpoint-comparison#incremental-and-dynamic-consent

[Joshua Howitt]

We are currently in the process of updating the Microsoft integrations to only require the specific scopes each integration needs to run successfully. Existing examples of this can be seen within Microsoft Teams and Entra ID.

Please let me know if you have any further questions about this.

[Martyn Houghton]

@Gareth Cantrell @Joshua Howitt

The requirement for full Admin access has been a blocker for our organisation as well and we have not been able to progress with operations such as being able to send Calendar entries to Co Workers etc, so this is really good news.

Cheers

Martyn

FYI @Paul Chambers

[Joshua Howitt]

Hi @Martyn Houghton

Glad I could help.

Josh

[Gareth Cantrell]

Wondering if there's been any updates to anymore Microsoft 365 integrations since the last update to this thread?

[Steve G]

@Gareth Cantrell This work is still ongoing, but we have deprecated the old Azure User & Group operations (that required the full Microsoft admin permissions) and replaced them with operations that require much fewer permissions to operate. Details can be found on the Hornbill wiki.

As and when more operations are replaced to use the new endpoints and fewer scopes, they will be published on the Announcements forum when released.

Thanks,

Steve