How to Create Microsoft API Credentials

Creating a Microsoft application for Wallboard

1. Open azure portal.
2. Select Azure Active Directory -> App registrations.
3. New Registration.

4. Name your application.
5. Select "Accounts in any organizational directory (Any Azure AD directory - Multitenant) and personal Microsoft accounts (e.g. Skype, Xbox)" under supported account types.

6. Register.

Setting up your Microsoft application

Authentication

• Add WEB type platform -> Set redirect URI to:

  • https://{yourdomain}/public-api/microsoft/authCallback/multiTenant/sharepoint

Configure

• Add more Redirect URI to support different authentication scenarios:

  • Add https://{yourdomain}/public-api/microsoft/authCallback/multiTenant/personal
    
  • Add https://{yourdomain}/public-api/microsoft/authCallback/singleTenant
    

• Save

API permissions

1. Add permission
2. Choose Microsoft Graph
3. Choose delegated permissions
4. Add the following permissions
   • Offline_access
   • Files.Read.All
   • Group.Read.All
   • Sites.Read.All
   • Calendars.ReadWrite (for calendar integration)

API permissions for PowerBI

1. Add permission for Power BI
2. Choose Power BI
3. Choose delegated permissions
4. Add the following permissions
5. Dashboard.Read.All
6. Dataset.Read.All
7. Report.Read.All
8. Workspace.Read.All

Certificates and secrets

1. Under Client secrets -> New client secret
2. Fill accordingly
3. Copy the secret! (It won't be readable afterwards.)

Set up Microsoft application in Wallboard

1. You need superadmin rights in Wallboard
2. Open system settings
3. Under Microsoft API settings
- Ms API Oauth2 client-id - you can find it on the overview page of the application in the azure active directory (with name of "Application (client) ID")
- Ms API Oauth2 client-secret - the secret that you set up earlier
4. Restart the server.