Before you Start

Before starting there are a few things you will need:

• Admin access to your Microsoft Entra admin center.
• Account Admin access to your Maptician environment. This only applies if you are configuring the integration on your own without assistance from Maptician.

Setup Microsoft Graph API

Step 1: Create App registration

In your organization’s Microsoft Entra admin center, browse to Applications >  “App registrations”. 

Step 2: Click the “New registration” option

This option is at the top of the window seen below.

Step 3: Name the application “Microsoft Graph API” 

By default, the supported account type should already be set to “Single tenant.” You can now click the Register button at the bottom of the page. 

Step 4: Configure API Permissions 

Click on the API permissions tab and remove the default “User.Read” permission as shown below:

Step 5: Click on “Add a permission”

For the Maptician Calendar Sync, there are 2 permissions that need to be added. 

Step 6: Select “Microsoft Graph”

Step 7: Select “Application permissions”

Search for and add the following permissions:

• AuditLog.Read.All
• Directory.Read.All

Step 7a: Click on “Grant admin consent”

Note: The access granted here includes all calendars in the organization which is more than is required for Maptician to sync room calendars. To restrict access exclusively to room resources, you can follow the MSFT PowerShell instructions in this Microsoft guidance document: Limiting application permissions to specific Exchange Online mailboxes

Step 8: Create the Client Secret

• Select “New client secret”

Step 9: Add the Client Secret

• Description: We suggest naming it Maptician but any description can be entered.
• Expires: This should be set to the maximum of 730 days (24 months).
• Important Note: If the client secret expires, Maptician will no longer be able to sync or access any data. It is important to rotate a new secret prior to the expiration date.

Step 10: Copy the Value (Secret Value) and Secret ID

Copy the secret value and secret ID and use them to Maptician (shown in Step 13).

• Important Note: When the Secret value is added to your Maptician environment, it will not be displayed once it has been saved, and it is only available in the Entra ID interface for a short time. Please store this value in a safe place in case you need to reference it at a later time.

Step 11: Copy the Application (client) ID and Directory (tenant) ID

Enter those into the Microsoft Office 365 / Azure Connection settings interface as shown in Step 13.

Step 12: Configuring the Microsoft Azure Connection (This is required for all Microsoft Integrations)

1. In your Maptician environment, click on the settings button (1)
2. In the settings panel, click on the Environment tab (2) and then the Office 365 Integration tab (3)
3. Click the green ADD button (4) to open the configuration panel

Step 13: Continuing to configure the Microsoft Azure Connection

• Name: Enter a name for the connection (no spaces are allowed in the name)
• Application/Client ID & Tenant ID: Copy and enter those as instructed in Step 11
• Secret ID & Secret Value: Copy and enter those as instructed in Step 10
• Secret Expiration: Enter the date the Secret Value expires (this is optional)
• Click the “Set” button to save the settings

Step 14: Confirm the new connection is now working

This can be done by selecting the blue “CHECK” button

• If the connection is successful, you will be presented with a “Confirmed” dialog box. Click OK to close the message
• If the connection check fails, you will be presented with an error dialog. If this occurs, confirm you have entered the correct information