Exchange Online

Configuring the Microsoft Exchange Online Administrator Settings

  • This operation is performed by the administrator of Microsoft Exchange Online.
  • Global administrator permissions are required to allow access.

Registering the App

  1. Log in to the Microsoft Entra admin center with an account for Microsoft Exchange Online.

    • Application creation permissions are required.
  2. Click [Applications] > [App registrations].
  3. Click [New registration].
  4. Enter a name of your choice.

    • The application name used here is not used in FUJIFILM IWpro. Register a name that is easy for the Microsoft Exchange Online administrator to identify.
  5. In the supported account types, select [Accounts in this organizational directory only ({organization name} only - Single tenant)].
  6. Select [Web] in the platform selection of the direct URL, and enter the following value.
  7. Click [Register].

Registering Authentication

  1. Log in to the Microsoft Entra admin center with an account for Microsoft Exchange Online.
  2. Select the registered app, then click [Authentication] in the menu on the left.
  3. Select [Access tokens (used for implicit flows)] and [ID tokens (used for implicit and hybrid flows)], and click [Save].
  4. Click [Certificates & secrets] in the menu on the left.
  5. Click [New client secret].
  6. Enter the description and expiration date in [Description] and [Expires], then click [Add].
  7. Make a note of the string in [Value] in [Client Secret].

  • [Client Secret] contains the [Value] and [ID] settings. The string in [Value] is used.
  • The value of the client secret cannot be displayed after refreshing the [Certificates & secrets] screen. If you did not make a note of the string in [Value], create a new client secret.
  • By default, a client secret expires after six months. You can extend this to a period of up to two years.
  • A link error will occur once the client secret expires. If an error occurs, follow the procedure in Updating a Microsoft Entra Client Secret.

Allowing Access

  1. Log in to the Microsoft Entra admin center with an account for Microsoft Exchange Online.
  2. Click [Applications] > [App registrations] in the menu on the left.
  3. Select the registered app, then click [API permissions] in the menu on the left.
  4. Click [Add a permission].
  5. Click [Microsoft Graph].
  6. Click [Update permissions].
  7. Select the following check box, then click [Add a permission].
    • [EWS.AccessAsUser.All]
    • [offline_access]
  8. Click [Grant admin consent for {account name}], then click [Yes].

Confirming the Setting Values

  1. Log in to the Microsoft Entra admin center with an account for Microsoft Exchange Online.
  2. Select the registered app, then click [Overview] in the menu on the left.
  3. Make a note of the values displayed in [Application (client) ID] and [Directory (tenant) ID].

Configuring the FUJIFILM BI Direct Service Administrator Settings

  • This operation is performed by the service administrator of FUJIFILM BI Direct.
  1. Log in to FUJIFILM BI Direct.
  2. Click [Tenant Management].
  3. Click [FUJIFILM IWpro] in the tenant list.
  4. Select [Cloud Service Management] from the menu.
  5. Click [Settings] for [Exchange Online] in the cloud service management list.
  6. Enter the values that you made a note of for the Microsoft items in Registering Authentication and Confirming the Setting Values.
    Item Description
    Application (client) ID Enter the value in [Application (client) ID].
    Client secret Enter the value in [Client Secret].
    Authorization endpoint Overwrite {YourTenantId} with the value in [Directory (tenant) ID].
    https://login.microsoftonline.com/{YourTenantId}/oauth2/V2.0/authorize
    Token endpoint Overwrite {YourTenantId} with the value in [Directory (tenant) ID].
    https://login.microsoftonline.com/{YourTenantId}/oauth2/V2.0/token
  7. Click [Update].
  8. Click [OK].