Integrating with Office 365

You can set up credentials that allow you integrate OneTrust with Office 365 (O365) applications such as SharePoint, OneDrive, and Outlook. This integration is accomplished using Microsoft Graph.

To integrate Office 365 with OneTrust, there are three things that must be configured:

  • Register your application in Azure AD

  • Configure credentials in OneTrust

  • Configure a workflow in OneTrust

Note:

In order to configure this integration, you must have Admin access to your organization's Exchange/Office 365 Active Directory in Azure.

To register an application in Azure AD

  1. Go to portal.azure.com and locate the Active Directory linked to Microsoft Exchange for your organization.
  2. On the Active Directory menu, select Manage > App registrations.
  3. On the App Registrations screen, click the New Registration button to create a new application called Graph.
  4. Copy and save the Application (client) ID. This value will be used later in the configuration.
  5. Click on the application to open it. The application details will appear.


  6. Click the Endpoints button.
  7. On the Endpoints pane, copy and save the OAuth 2.0 token endpoint (v2). This URL will be used later when configuring the credentials in OneTrust.
  8. On the application menu, select Manage > Certificates & secrets.
  9. On the Certificates & secrets screen, click the New client secret button.
  10. On the Add a client secret modal, enter a description for the secret and set an expiration period.
  11. Click the Add button. A new secret will be generated.
  12. Copy and save the value of the client secret. This value cannot be retrieved again.
  13. On the application menu, select Manage > API permissions.
  14. On the API permissions screen, click on the name of your application.
  15. On the Request API Permissions pane, select Application Permissions.
    Note:

    This allows OneTrust to access Office 365 as an application, rather than as a user.

  16. Select the check boxes for the permissions that are relevant to the integration you are trying to build.
  17. Save your selections.
  18. Click the Grant admin consent for Default Directory button to approve your changes.

To configure credentials for Office 365

  1. On the Integrations menu, select Integrations > Credentials.

    The Credentials screen appears.

  2. Click the Add New button.

    The Add Credential - Select System screen appears.

  3. Enter Office 365 in the Select System field, then click the Next button.

    The Add Credential - Enter Credential Details screen appears.

  4. The screen will populate fields and suggested values for the Office 365 integration. Complete or update the fields as necessary, for more information, see Add Credential Screen Reference.
    Note:

    Some fields relative to the field may not display in this screen. Return to review/edit the credential the Grant/Auth Type and Auth Parameters populated in the Credential Details screen. For more information, see To edit Office 365 credentials.

  5. Click the Save button.

Add Credential Screen Reference





Field
Description
Credential Name

Enter a name for the credentials.

Description

Enter a description of the credentials.

Credential Type

This field will pre-populate a OAuth credential type.

Protocol

This field will pre-populate a HTTPS protocol.

Hostname

Enter the hostname for the credentials.

Auth URL

Enter an Auth URL .

Access Token URL

Enter the endpoint copied from the application.

Client ID

Enter the Application (client) ID from the application.

Client Secret

Enter the previously generated secret.

Scope

Enter your configured Office 365 scope(s).

Default Headers

Add two headers with the following configuration:

Key

Value

Accept

application/json;odata=verbose

Content-Type

application/x-www-form-urlencoded
Access Token

Enter the Access Token

To edit Office 365 credentials

  1. On the Integrations menu, select Integrations > Credentials.

    The Credentials screen appears.

  2. Click your Office 365 credentials.

    The Credential Details screen appears.

  3. Click the Edit icon next to any field to update the credential.
    Note:

    Information like Grant Type, Auth Type, and Auth Parameters can be viewed here in the Credential Details screen.



  4. Click the Save button to keep your changes.

To configure a workflow for Office 365

  1. On the Integrations menu, select Integrations > Systems.
    The Integration Systems screen appears.
  2. Click on the Office 365 card. screen appears.
    The System Details screen appears.
  3. Click the Add button for the workflow you want to implement.
    The Add Workflow Name modal appears.
  4. Enter a name for the workflow and then select the credential you created.
  5. Click the Create button.
    The Workflow Builder screen appears.
  6. Click the Activate button.