--- title: Azure Connectors slug: admin-guide/azure-connectors docTags: createdAt: 2024-11-19T12:39:18.209Z --- ## Azure Connectors Summary  This guide provides a comprehensive overview of how to establish connections between the ITCC System and Microsoft Azure. It includes instructions for configuring incoming email, synchronizing assets via Microsoft Azure Intune, syncing users through Azure Active Directory (AD), and linking OneDrive folders.  A lost connection between ITCC and Azure can occur for various reasons, including Network issues between the Azure server and the ITCC server (e.g., internal network problems or power outages), expired secret value, server restarts or Other unforeseen disruptions. ### Step 1: Create an App Registration in Azure  1. **Open Azure Portal**: Go to Azure and navigate to **App registrations**.  2. **New Registration**: Click on **New registration**.  3. **Fill in Registration Details**:  4. **Name**: Enter a descriptive name for your app.  5. **Supported Account Types**: Choose the appropriate option based on your needs.  6. **Redirect URI**: Select **Web** and enter the appropriate URI based on your use case:  7. For Incoming Mail: [https://domain/ords/itcc/itcc\_ews/accescode/](#)  8. For Azure AD/MS Azure Intune/OneDrive: [http://localhost/myapp/](http://localhost/myapp/)  9. For OAuth2: [https://domain/ords/workspace\_name.ITCC\_AUTH2.oauth2callback](https://domain/ords/workspace_name.ITCC_AUTH2.oauth2callback)  10. Ensure the redirect URI ends with a /.  11. **Register the App**: Click the **Register** button. ::Image[]{src="https://api.archbee.com/api/optimize/zEVWKsZtpmpx-RIpALRPL/JmU3CNEd687MbGzrkBpHO_image.png" size="76" width="793" height="585" position="center" showCaption="false"} ###  Step 2: Add a Client Secret  1. After registration, click on **Add a certificate or secret**.  2. Click on **New client secret**.  3. **Description**: Enter "ITCC Client Secret".  4. **Expires**: Set to 24 months (or more).  5. Click **Add**.  6. **Copy the Value**: Make sure to copy the client secret value and save it in a secure location. You won’t be able to see it again once you navigate away from this screen.  ::Image[]{src="https://api.archbee.com/api/optimize/zEVWKsZtpmpx-RIpALRPL/jMsyE7dayk5nmS0EUDHfJ_.blob" size="58" width="410" height="247" position="center" showCaption="false"} ### Step 3: Configure API Permissions  1. Go back to the **App registrations** and select your app.  2. Click on **View API permissions**.  3. Click **Add a permission** and select **Microsoft Graph**.  4. Select **Delegated permissions** and search for the permissions needed based on your connections:  **Incoming Mail**:  openid, offline\_access, IMAP.AccessAsUser.All, Mail.ReadWrite, Mail.ReadWrite.Shared, SMTP.Send, User.Read, User.Read.All  **OneDrive**:  openid, offline\_access, Files.ReadWrite.All  **Azure AD**:  openid, offline\_access, User.Read.All  **MS Azure Intune**:  openid, offline\_access, DeviceManagementManagedDevices.Read.All, DeviceManagementApps.Read.All, DeviceManagementConfiguration.Read.All, DeviceManagementServiceConfig.Read.All  **OAuth2**:  openid  6\. Click **Grant admin consent for \[Your Company Name]** and confirm.  ### Step 4: Collect Application Information  Copy the following details of your new app registration from **App registrations** and save them:  - **Application (client) ID**  - **Directory (tenant) ID**  - **Redirect URI** - **Secret Value** [(from step 2)](docId\:QJxwx3PZ5t3KhzVwQ3c54) ### Step 5: Set Up Connectors in ITCC  You can now use the collected details to configure the following connectors in ITCC:  - Incoming Mail  - OneDrive  - Azure AD  - MS Intune  - oAuth2  ##  5.1 Incoming Mail Connector  1. Navigate to **Administration -> Incoming Mail Integration** and click on **Add**.  2. Fill in the following fields:  | **Field**  | **Value**  | | -------------------- | ---------------------------------------------------------------------------------------------------------------------------------------------------------------------- | | **Protocol**  | EWS  | | **Proxy / Wallet**  | - If a proxy is installed on the ITCC server, select **"Proxy"** (default option).  
- If not, install Oracle Wallet on the ITCC server and select **"Wallet"**.  | | **User**  | Mailbox address  | | **Message**  | Automatically generated by the ITCC  | | **Login Code**  | login.microsoftonline.com/Directory tenant ID/oauth2/v2.0/  | | **Client ID**  | Application (client) ID [(Refer to Step 4)](docId\:QJxwx3PZ5t3KhzVwQ3c54) | | **Client Secret**  | Client Secret [(Refer to Step 2)](docId\:QJxwx3PZ5t3KhzVwQ3c54) | | **Proxy**  | If **"Proxy"** is selected, enter: [http://localhost:82/itccproxy/](http://localhost:82/itccproxy/)  | | **Wallet Path**  | If **"Wallet"** is selected, enter the wallet path (the mail app wallet can be reused).  | | **Wallet Password**  | If **"Wallet"** is selected, enter the wallet password (the mail app wallet can be reused).  | | **Redirect URL**  | The redirect URI defined in the Azure App Registration [(Refer to Step 4)](docId\:QJxwx3PZ5t3KhzVwQ3c54) | 1. Click **Save** and fill in the additional fields:  | **Field**  | **Value**  | | ----------------- | ------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------ | | **Auth** **URL**  | https\://login.microsoftonline.com/[Directory tenant ID](#)** ** 
/oauth2/v2.0/authorize?client\_id= [Application Client ID](#) response\_type=code\&redirect\_uri=redirect to ITCC external URL \&response\_mode=query\&scope=openid offline\_access  https\://graph.microsoft.com/IMAP.AccessAsUser.All https\://graph.microsoft.com/Mail.ReadWrite\&state=12345  
  
For example:   
https\://login.microsoftonline.com/XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXa5d73/oauth2/v2.0/authorize?client\_id=XXXXXXXXXXXXXXXXXXXXXXXXXXx42c20\&response\_type=code\&redirect\_uri=https\://poc.it-care-center.com/ords/itcc/itcc\_ews/accescode\&response\_mode=query\&scope=openid offline\_access  https\://graph.microsoft.com/IMAP.AccessAsUser.All https\://graph.microsoft.com/Mail.ReadWrite\&state=12345  | | **Access Code**  | Click [here](#) to learn how to generate an access code.  | ## 5.2 OneDrive Connector  1. Navigate to **Administration -> One Drive Connectors** and click on **Add**.  2. Fill in the necessary fields with the relevant information:  | **Field**  | **Value**  | | --------------------------- | -------------------------------------------------------------------------------------------------------------------------------------------------- | | **Activate**  | YES  | | **Name**  | Provide a meaningful name  | | **Login Code / Tenant ID**  | Directory tenant ID [(Refer to Step 4)](docId\:QJxwx3PZ5t3KhzVwQ3c54) | | **Client ID**  | Application (client) ID [(Refer to Step 4)](docId\:QJxwx3PZ5t3KhzVwQ3c54) | | **Client Secret**  | Client Secret [(Refer to Step 2)](docId\:QJxwx3PZ5t3KhzVwQ3c54) | | **Proxy/Wallet**  | Select “Proxy” if a proxy is installed on the ITCC server (default option). If not, select “Wallet” after installing Oracle Wallet on the server.  | | **Proxy URL**  | If "Proxy" is selected, enter: [http://localhost:82/itccproxy/](http://localhost:82/itccproxy/)  | | **Wallet Path**  | If "Wallet" is selected, enter the wallet path (the mail app wallet can be reused).  | | **Wallet Password**  | If "Wallet" is selected, enter the wallet password (the mail app wallet can be reused).  | | **Redirect URL**  | The redirect URI defined in the Azure App Registration [(Refer to Step 4)](docId\:QJxwx3PZ5t3KhzVwQ3c54) | 3\. Click **Save** and fill in the additional fields:  | **Field**  | **Value**  | | ----------------- | ------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | | **Auth** **URL**  | https\://login.microsoftonline.com/[Directory tenant ID](#)** ** 
/oauth2/v2.0/authorize?client\_id= [Application Client ID](#) response\_type=code\&redirect\_uri=redirect to ITCC external URL \&response\_mode=query\&scope=openid offline\_access  https\://graph.microsoft.com/IMAP.AccessAsUser.All https\://graph.microsoft.com/Mail.ReadWrite\&state=12345  
  
For example:   
  
https\://login.microsoftonline.com/xxxxxxxxxxxxxx/oauth2/v2.0/authorize?client\_id=xxxxxxxxxxxxxcec0\&response\_type=code\&redirect\_uri=http\://localhost/myapp/\&response\_mode=query\&scope=openid+offline\_access+Files.ReadWrite.All  | | **Access Code**  | Click [here](#) to learn how to generate an access code.  | ## 5.3 Azure AD Connector  1. Navigate to **Administration -> Azure AD Sync**.  2. Enter the relevant details similar to the previous connectors:  | **Field**  | **Value**  | | ------------------ | ------------------------------------------------------------------------------ | | **Tenant ID**  | Directory tenant ID [(Refer to Step 4)](docId\:QJxwx3PZ5t3KhzVwQ3c54) | | **Client ID**  | Application (client) ID [(Refer to Step 4)](docId\:QJxwx3PZ5t3KhzVwQ3c54) | | **Client Secret**  | Client Secret [(Refer to Step 2)](docId\:QJxwx3PZ5t3KhzVwQ3c54) | | **Redirect URL**  | The redirect URI defined in the Azure App Registration [(refer to Step 4)](#)  | | **Proxy**  | Enter: [http://localhost:82/itccproxy/](http://localhost:82/itccproxy/)  | 3\. Click **Save** and fill in the additional fields:  | **Field**  | **Value**  | | ----------------- | ------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | | **Auth** **URL**  | https\://login.microsoftonline.com/[Directory tenant ID](#)** ** 
/oauth2/v2.0/authorize?client\_id= [Application Client ID](#) response\_type=code\&redirect\_uri=redirect to ITCC external URL \&response\_mode=query\&scope=openid offline\_access  https\://graph.microsoft.com/IMAP.AccessAsUser.All https\://graph.microsoft.com/Mail.ReadWrite\&state=12345  
  
For example:   
  
https\://login.microsoftonline.com/xxxxxxxxxxxxxx/oauth2/v2.0/authorize?client\_id=xxxxxxxxxxxxxcec0\&response\_type=code\&redirect\_uri=http\://localhost/myapp/\&response\_mode=query\&scope=openid+offline\_access+Files.ReadWrite.All  | | **Access Code**  | Click [here](#) to learn how to generate an access code.  | ## 5.4 MS Intune Connector  1. Navigate to **Administration -> MS Azure Intune**.  2. Fill in the fields as needed, ensuring all relevant information is included:  | **Field**  | **Value**  | | --------------------------- | -------------------------------------------------------------------------------------------------------------------------------------------------- | | **Activate**  | YES  | | **Name**  | Provide a meaningful name  | | **Login Code / Tenant ID**  | Directory tenant ID [(Refer to Step 4)](docId\:QJxwx3PZ5t3KhzVwQ3c54) | | **Client ID**  | Application (client) ID [(Refer to Step 4)](docId\:QJxwx3PZ5t3KhzVwQ3c54) | | **Client Secret**  | Client Secret [(Refer to Step 2)](docId\:QJxwx3PZ5t3KhzVwQ3c54) | | **Proxy/Wallet**  | Select “Proxy” if a proxy is installed on the ITCC server (default option). If not, select “Wallet” after installing Oracle Wallet on the server.  | | **Proxy URL**  | If "Proxy" is selected, enter: [http://localhost:82/itccproxy/](http://localhost:82/itccproxy/)  | | **Wallet Path**  | If "Wallet" is selected, enter the wallet path (the mail app wallet can be reused).  | | **Wallet Password**  | If "Wallet" is selected, enter the wallet password (the mail app wallet can be reused).  | | **Redirect URL**  | The redirect URI defined in the Azure App Registration [(refer to Step 4)](#).  | 3\. Click **Save** and fill in the additional fields:  | **Field**  | **Value**  | | ----------------- | ------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | | **Auth** **URL**  | https\://login.microsoftonline.com/[Directory tenant ID](#)** ** 
/oauth2/v2.0/authorize?client\_id= [Application Client ID](#) response\_type=code\&redirect\_uri=redirect to ITCC external URL \&response\_mode=query\&scope=openid offline\_access  https\://graph.microsoft.com/IMAP.AccessAsUser.All https\://graph.microsoft.com/Mail.ReadWrite\&state=12345  
  
For example:   
  
https\://login.microsoftonline.com/xxxxxxxxxxxxxx/oauth2/v2.0/authorize?client\_id=xxxxxxxxxxxxxcec0\&response\_type=code\&redirect\_uri=http\://localhost/myapp/\&response\_mode=query\&scope=openid+offline\_access+Files.ReadWrite.All  | | **Access Code**  | Click [here](#) to learn how to generate an access code.  | ##   5.5 oAuth2 Connector 1. Navigate to **Administration -> Authentication**.  2. Fill in the fields in the oAuth2 region as needed, ensuring all relevant information is included:  | **Field**  | **Value**  | | ----------------------- | ------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------ | | **Login Redirect**  | [https://login.microsoftonline.com/tenant\_ID/oauth2/v2.0/authorize](https://login.microsoftonline.com/tenant_ID/oauth2/v2.0/authorize) 
Replace the Tenant\_ID with the application Directory tenant ID [(Refer to Step 4)](docId\:QJxwx3PZ5t3KhzVwQ3c54).  | | **Oauth2 Button Name**  | Provide a meaningful name for the Oauth2 login button that will be displayed in the login page.  | | **Client ID**  | Application (client) ID [(Refer to Step 4)](docId\:QJxwx3PZ5t3KhzVwQ3c54)   | | **Client Secret**  | Client Secret [(Refer to Step 2)](docId\:QJxwx3PZ5t3KhzVwQ3c54) | | **Redirect URL**  | The redirect URI defined in the Azure App Registration[(Refer to Step 4)](docId\:QJxwx3PZ5t3KhzVwQ3c54) | | **Token API URL**  | [http://localhost:82/itccproxy/login.microsoftonline.com/Tenant\_ID/oauth2/v2.0/token/](http://localhost:82/itccproxy/login.microsoftonline.com/Tenant_ID/oauth2/v2.0/token/) 
Replace the Tenant\_ID with the application Directory tenant ID [(Refer to Step 4)](docId\:QJxwx3PZ5t3KhzVwQ3c54). | | **Get User API URL**  | [http://localhost:82/itccproxy/graph.microsoft.com/v1.0/me](http://localhost:82/itccproxy/graph.microsoft.com/v1.0/me)   | | **Identify User By**  | Select either to identify the login user by the ITCC user’s email or by username.  | 3\. Click **Save **to save the changes.