Microsoft Graph API app registration

Jess Robinson 0 Reputation points
2024-06-18T11:58:20.4466667+00:00

We are a Salesforce ISV looking to provide Outlook & Teams integration in our Salesforce app. I have created an App Registration in the MS Entra admin center, all is working fine in prototype. Users will connect from Salesforce via OAuth and approve the scopes so we can access relevant data.

What is the approval process we need to go through to allow end users to access the app registration? Currently I am getting Access denied messages for any users outside of our sandbox users.

Microsoft Graph
Microsoft Graph
A Microsoft programmability model that exposes REST APIs and client libraries to access data on Microsoft 365 services.
11,253 questions
Microsoft Entra ID
Microsoft Entra ID
A Microsoft Entra identity service that provides identity management and access control capabilities. Replaces Azure Active Directory.
20,359 questions
ISV (Independent Software Vendor)

1 answer

Sort by: Most helpful
Most helpful Newest Oldest
  1. CarlZhao-MSFT 39,736 Reputation points
    2024-06-19T09:35:11.8633333+00:00

    Hi @Jess Robinson

    You need to configure your app as a multi-tenant app in MS Entra.

    Then, when you try to log in to the application registration with end users, you need to change /{teanat_id} to /common. For example:

    https://login.microsoftonline.com/common/oauth2/v2.0/authorize

    Hope this helps.

    If the reply is helpful, please click Accept Answer and kindly upvote it. If you have additional questions about this answer, please click Comment.