Skip to content

Microsoft credentials#

You can use these credentials to authenticate the following nodes:

  • Microsoft Dynamics CRM
  • Microsoft Excel
  • Microsoft Graph Security
  • Microsoft OneDrive
  • Microsoft Outlook
  • Microsoft SharePoint
  • Microsoft Team
  • Microsoft Teams Trigger
  • Microsoft To Do

Prerequisites#

  • Create a Microsoft Azure account.
  • Create at least one user account with access to the appropriate service.
  • If the user account is managed by a corporate Microsoft Entra account, the administrator account has enabled the option “User can consent to apps accessing company data on their behalf” for this user (see the Microsoft Entra documentation).

Supported authentication methods#

  • OAuth2

Using OAuth2#

There are two main steps to configure OAuth2 from scratch:

  1. Register an application with the Microsoft Identity Platform.
  2. Generate a client secret for that application.

Follow the detailed instructions for each step below. For more detail on the Microsoft OAuth2 web flow, refer to Microsoft authentication and authorization basics.

Register an application#

Register an application with the Microsoft Identity Platform:

  1. Open the Microsoft Application Registration Portal.
  2. Select Register an application.
  3. Enter a Name for your app.
  4. In Supported account types, select Accounts in any organizational directory (Any Azure AD directory - Multi-tenant) and personal Microsoft accounts (for example, Skype, Xbox).
  5. In Register an application:
    1. Copy the OAuth Callback URL from your Easexpense credential.
    2. Paste it into the Redirect URI (optional) field.
    3. Select Select a platform > Web.
  6. Select Register to finish creating your application.
  7. Copy the Application (client) ID and paste it into Easexpense as the Client ID.

Refer to Register an application with the Microsoft Identity Platform for more information.

Generate a client secret#

With your application created, generate a client secret for it:

  1. On your Microsoft application page, select Certificates & secrets in the left navigation.
  2. In Client secrets, select + New client secret.
  3. Enter a Description for your client secret, such as Easexpense credential.
  4. Select Add.
  5. Copy the Secret in the Value column.
  6. Paste it into Easexpense as the Client Secret.
  7. If you see other fields in the Easexpense credential, refer to Service-specific settings below for guidance on completing those fields.
  8. Select Connect my account in Easexpense to finish setting up the connection.
  9. Log in to your Microsoft account and allow the app to access your info.

Refer to Microsoft's Add credentials for more information on adding a client secret.

Common issues#

Here are the known common errors and issues with Microsoft OAuth2 credentials.

Need admin approval#

When attempting to add credentials for a Microsoft360 or Microsoft Entra account, users may see a message when following the procedure that this action requires admin approval.

This message will appear when the account attempting to grant permissions for the credential is managed by a Microsoft Entra. In order to issue the credential, the administrator account needs to grant permission to the user (or "tenant") for that application.

The procedure for this is covered in the Microsoft Entra documentation.