Skip to main content

Microsoft Outlook OAuth Setup Guide

A step-by-step guide for Whitelabel admins to set up Microsoft Outlook OAuth integration through Microsoft Entra ID.

Written by Alex
Updated today

This guide explains how to register an application in Microsoft Entra ID and configure it for Outlook OAuth integration.

This setup allows your application to securely connect and manage customer mailboxes using Microsoft services.

Prerequisites

Before you begin, ensure you have:

  • An active Azure account

  • Minimum role: Application Developer

  • Access to a tenant (directory)

    • You can use the default directory

Step 1: Register a New Application

  1. Sign in to the Microsoft Entra Admin Center

  2. Go to: Entra ID → App registrations → New registration

  3. Fill in the details:

    • Name:
      Enter a meaningful Name for your app.

    • Supported account types:
      Choose based on your use case:

      • Single tenant → Only your organization

      • Multitenant → Multiple organizations

      • Multitenant + Personal accounts (Recommended) → Org + Outlook/Hotmail users
        ​
        ​

  4. Redirect URI:


    ​ Set it to: https://<your-api-domain>/oauth/outlook/callback

    Replace <your-api-domain> with your actual domain (remove the angle brackets). For example, if your API domain is api.example.com, the Redirect URI should be https://api.example.com/oauth/outlook/callback.
    ​
    ​

  5. Click Register

Step 2: Copy Client ID

After registration:

  • Go to Overview

  • Copy the Application (Client) ID

  • Paste the Client ID into the WeConnect Admin Panel under Whitelabel Setup → More Settings → Integrations → Outlook/Microsoft.

Step 3: Create Client Secret

  1. Go to:
    ​ Certificates & secrets → Client secrets

  2. Click New client secret

  3. Add a description and choose expiry

  4. Click Create

  5. Copy the Secret Value

  6. Paste the Secret Value into the Client Secret field in the WeConnect Admin Panel under Whitelabel Setup → More Settings → Integrations → Outlook/Microsoft .
    ​

Step 4: Configure API Permissions

  1. Go to:
    API permissions → Add a permission

  2. Select:

    • Microsoft Graph

    • Delegated permissions

  3. Add the following permissions:

    • openid

    • Mail.ReadWrite

    • Mail.Send

    • offline_access

    • User.Read
      ​
      ​

  4. Click Add permissions

Did this answer your question?