Office365 Service Authentication¶
Use this page when Emakin needs Office365 server-to-server access for integrations such as Office365 sign-in or OneDrive for Business file services.
Note: The Microsoft application-registration steps below reflect the currently documented setup and may differ from the latest Microsoft 365 or Entra admin portal flow.
Creating Service Account¶
Before allowing access, register Emakin as an application. According to the current documentation, this is already configured for cloud deployments and is mainly required for on-premises environments.
- Log in to apps.dev.microsoft.com.
- Create a new application and select Web as the application type.
- Enter the application name, for example
emakin. - Enter the callback paths:
https://oauth.emakin.com/oauth/callbackhttp://mydomain.emakin.com/oauth/callback- Generate a new key pair.
- Download the generated
.pfxfile.
Configuring Emakin for Office365 Integrated Service¶
- Open the Host Administration Panel.
- Go to Integrated Services under the application settings.
- Add a new service with service type Office365.
- Enter an integration name, for example
Service_Office365. - Expand the service row details.
- Enter the Client Id and leave Client Secret empty.
- Enter the Service Account Id created in the service-account step.
- Enter the service-account key in one of the documented formats:
BASE64;<CertificateBase64>;<CertificatePassword>URL;<CertificateFileUrl>;<CertificatePassword>
Configuring Emakin for One Drive for Business Integration¶
- Open the Host Administration Panel.
- Go to Other Services under the application settings.
- Add a new file service that uses the Office 365 client type with the Office365 integration service.
- Enter
File.ReadWrite.All Sites.ReadWrite.Allin the scope setting. - If you want to allow offline access to the OneDrive API without user interaction, add the
offlinescope as a space-separated value.