How to integrate your Office 365 email with Laminin

View this guide in Tango

1. First we will create a new Enterprise application that will be accessed by Laminin in order to manage selected users' mail accounts

2. From the Home page search for "Enterprise applications" in the top search bar

3. Click on "Enterprise applications"

4. Click on "New application"

5. Click on "Create your own application"

6. Give your application a name

7. Choose the "Integrate any other application you don't find in the gallery (Non-gallery)" option

8. Click on "Create"

9. With the application created we need to specify the permissions of the application. 

10. Click on "Permissions" in the left menu.

11. Click on "app registration"

12. Click on "Add a permission"

13. Click on "Microsoft Graph"

14. Click on "Application permissions"

15. In the search bar type "user"

16. Click on User to expand the user permissions

17. Select the "User.Read.All" permission

This allows Laminin to read your Office 365 users' full profiles

18. Go back to the search bar and type "mail"

19. Click on Mail to expand the mail permissions

20. Select the "Mail.ReadWrite" and "Mail.Send" permissions

This allows Laminin to access to read and write mail in all mailboxes and send email using your mail account in the My Mail feature

21. Go back to the search bar and type "calendars"

22. Click on Calendars to expand the calendar permissions

23. Select the "Calendars.ReadWrite" permission

This allows Laminin to view and manage your calendar which is used for instance in the Appointment Setup feature

24. Go back to the search bar and type "people"

25. Click on People to expand the people permissions

26. Select the "People.Read.All" permission

This allows Laminin to access your contacts in order to select this contact in the My Mail feature

27. Click on Add permissions

28. Click on "Grant admin consent for YourCompany"

29. Click on Yes

30. Next we will add users to the application whose mail accounts will be accessible through Laminin

31. Go back to your application root directory by either clicking on your application name as shown here or by going back to "Enterprise applications" and selecting your application

32. Click on "Users and groups"

33. Click on "Add user/group"

34. Under Users click on "None Selected"

35. Select the users that requires mail  integration with Laminin

36. Click on Assign

37. Next we will add a client secret that Laminin will use to authenticate itself to your Azure authentication service

38. Go back to your application root directory by either clicking on your application name as shown here or by going back to "Enterprise applications" and selecting your application

39. Click on Permissions

40. Click on app registration

41. Click on Certificates & secrets

42. Click on New client secret

43. Give the client secret a name

44. Select from the dropdown list how long the client secret will be valid for

45. Click on Add

46. Lastly we will complete the configuration in Laminin

47. Open the Admin menu in Laminin

48. Click on "Integrations" in the left menu

49. Under "Integrations" click on "Office 365 Settings"

50. Click on "New Office App"

51. Give the New Office App a name

52. Select the tenant that this Office Application will be accessed by

53. Go back to the Azure Portal and click on Overview

If you click on Overview and don't see your Application ID and Tenant ID you are probably in the root directory of your application. Follow steps 38-40 and then click on Overview.

54. Copy the value of "Directory (tenant) ID"

55. Back at Laminin paste the Tenant Id into the "Tenant Id" field

56. Go back to the Azure Portal and copy the value of "Application (client) ID"

57. Back at Laminin paste the Application ID into the "Application ID" field

58. Go back to the Azure Portal and click on "Certificates & secrets"

59. Click on Client secrets

60. Copy the Value of Client Secret created earlier in Step 41-45

Please make sure you copy the Value and not the Client ID

61. Back at Laminin paste Client Secret into the "ClientSecret" field

62. Check the "People Api Enalbed?" checkbox to allow accessing your Office 365 Contacts

This is to access the "People.Read.All" permission that was configured in Step 26

63. Check the "Calendar Api Enalbed?" checkbox to allow accessing your Office 365 Calendar

This is to access the "Calendars.ReadWrite" permission that was configured in Step 23

64. Click on  Save

65. Now that the configuration is done we need to enable mail integration for the users that were added in Step 35

66. Click on User Management

67. Under "User Management" click on "Manage Users"

68. Select the user you want to enable mail integration for

69. Tick the "Mail Integration Enabled?" checkbox

70. Select the Office 365 Application we just created from the Mail Provider dropdown

71. Click on Save

72. The user will now have access to My Mail

The user will need to log out and back in to Laminin for this change to take effect

73. The user can now manage their email using Laminin

For any questions or additional support, please mail our team at support@lamin.in