Exchange Online
Configuring the Microsoft Exchange Online Administrator Settings
- This operation is performed by the administrator of Microsoft Exchange Online.
- Global administrator permissions are required to allow access.
Registering the App
- Log in to the Microsoft Entra admin center with an account for Microsoft Exchange Online.
- Application creation permissions are required.
- Click [Applications] > [App registrations].
- Click [New registration].
- Enter a name of your choice.
- The application name used here is not used in FUJIFILM IWpro. Register a name that is easy for the Microsoft Exchange Online administrator to identify.
- In the supported account types, select [Accounts in this organizational directory only ({organization name} only - Single tenant)].
- Select [Web] in the platform selection of the direct URL, and enter the following value.
- Click [Register].
Registering Authentication
- Log in to the Microsoft Entra admin center with an account for Microsoft Exchange Online.
- Select the registered app, then click [Authentication] in the menu on the left.
- Select [Access tokens (used for implicit flows)] and [ID tokens (used for implicit and hybrid flows)], and click [Save].
- Click [Certificates & secrets] in the menu on the left.
- Click [New client secret].
- Enter the description and expiration date in [Description] and [Expires], then click [Add].
- Make a note of the string in [Value] in [Client Secret].
- [Client Secret] contains the [Value] and [ID] settings. The string in [Value] is used.
- The value of the client secret cannot be displayed after refreshing the [Certificates & secrets] screen. If you did not make a note of the string in [Value], create a new client secret.
- By default, a client secret expires after six months. You can extend this to a period of up to two years.
- A link error will occur once the client secret expires. If an error occurs, follow the procedure in Updating a Microsoft Entra Client Secret.
Allowing Access
- Log in to the Microsoft Entra admin center with an account for Microsoft Exchange Online.
- Click [Applications] > [App registrations] in the menu on the left.
- Select the registered app, then click [API permissions] in the menu on the left.
- Click [Add a permission].
- Click [Microsoft Graph].
- Click [Update permissions].
- Select the following check box, then click [Add a permission].
- [EWS.AccessAsUser.All]
- [offline_access]
- Click [Grant admin consent for {account name}], then click [Yes].
Confirming the Setting Values
- Log in to the Microsoft Entra admin center with an account for Microsoft Exchange Online.
- Select the registered app, then click [Overview] in the menu on the left.
- Make a note of the values displayed in [Application (client) ID] and [Directory (tenant) ID].
Configuring the FUJIFILM BI Direct Service Administrator Settings
- This operation is performed by the service administrator of FUJIFILM BI Direct.
- Log in to FUJIFILM BI Direct.
- Click [Tenant Management].
- Click [FUJIFILM IWpro] in the tenant list.
- Select [Cloud Service Management] from the menu.
- Click [Settings] for [Exchange Online] in the cloud service management list.
- Enter the values that you made a note of for the Microsoft items in Registering Authentication and Confirming the Setting Values.
Item Description Application (client) ID Enter the value in [Application (client) ID]. Client secret Enter the value in [Client Secret]. Authorization endpoint Overwrite {YourTenantId} with the value in [Directory (tenant) ID].
https://login.microsoftonline.com/{YourTenantId}/oauth2/V2.0/authorizeToken endpoint Overwrite {YourTenantId} with the value in [Directory (tenant) ID].
https://login.microsoftonline.com/{YourTenantId}/oauth2/V2.0/token - Click [Update].
- Click [OK].