Microsoft [Office] 365
Office365 integration
Almaden, through a daemon application (background), collects user data, SKU and license consumption of Microsoft products. To integrate the collection, it is necessary to register an application in Azure, create a client secret or use a certificate and inform the following data to the smart:
- Application ID (CLIENT ID)
- Directory ID (TENANT ID)
- Client Secret or Certificate
Step-by-Step Guide to Configuring the Integration
1- Search for: Certificates and Secrets.
![image 64 Microsoft [Office] 365](https://docs.almaden.app/wp-content/uploads/2023/07/image-64.png)
2- Click the + New registration button.
![image 65 Microsoft [Office] 365](https://docs.almaden.app/wp-content/uploads/2023/07/image-65.png)
3- In the Name field, enter a name for the application (e.g., “Collective IQ ITAM Office 365 “).
Under Supported account types, select Accounts in this organizational directory only.
Leave the other fields as they are and click Register.
![image 66 Microsoft [Office] 365](https://docs.almaden.app/wp-content/uploads/2023/07/image-66.png)
4- Now, the application is created. Let’s retrieve the required information.
![image 67 Microsoft [Office] 365](https://docs.almaden.app/wp-content/uploads/2023/07/image-67.png)
5- Get the application and directory IDs.
NOTE: Copy to a notepad.
o Application (Client) ID
o Directory (Tenant) ID
These values will be used in Collective IQ ITAM.
![image 68 Microsoft [Office] 365](https://docs.almaden.app/wp-content/uploads/2023/07/image-68.png)
Create a Client Secret
6- In the left-hand menu, click Certificates & secrets.
![image 70 Microsoft [Office] 365](https://docs.almaden.app/wp-content/uploads/2023/07/image-70.png)
7- Under the Client secrets tab, click + New client secret.
![image 71 Microsoft [Office] 365](https://docs.almaden.app/wp-content/uploads/2023/07/image-71.png)
8- Under Expires, choose a validity period (I recommend 24 months to avoid frequent expiration).
Click Add.
![image 75 Microsoft [Office] 365](https://docs.almaden.app/wp-content/uploads/2023/07/image-75.png)
9- In the Description field, enter a name (e.g., “Collective IQ ITAM Office 365 Secrets.”).
Copy the generated secret value immediately, as it will only be displayed once.
This secret will also be used in SmartCenter.
![image 72 Microsoft [Office] 365](https://docs.almaden.app/wp-content/uploads/2023/07/image-72.png)
Grant Microsoft Graph API Permissions.
10- In the left-hand menu, click API permissions.
Click + Add a permission.
Select Microsoft APIs, then Microsoft Graph.
Click Application permissions (do not select “Delegated permissions”).
![image 76 Microsoft [Office] 365](https://docs.almaden.app/wp-content/uploads/2023/07/image-76.png)
11- In the search box, add the required permissions:
- Directory.Read.All
- User.Read.All
![image 77 Microsoft [Office] 365](https://docs.almaden.app/wp-content/uploads/2023/07/image-77.png)
![image 78 Microsoft [Office] 365](https://docs.almaden.app/wp-content/uploads/2023/07/image-78.png)
Click Add permissions.
Grant Admin Consent.
12- Still on the API permissions page, click Grant admin consent for [Organization Name].
Confirm the action.
![image 79 Microsoft [Office] 365](https://docs.almaden.app/wp-content/uploads/2023/07/image-79.png)
Configure Collective IQ ITAM:
13- Now that we have all the required details, enter them into Collective IQ ITAM:
- Application (Client) ID
- Directory (Tenant) ID
- Client Secret
![image 81 Microsoft [Office] 365](https://docs.almaden.app/wp-content/uploads/2023/07/image-81.png)
Integration completed.
![image 82 Microsoft [Office] 365](https://docs.almaden.app/wp-content/uploads/2023/07/image-82.png)
License balance being displayed.
![image 83 Microsoft [Office] 365](https://docs.almaden.app/wp-content/uploads/2023/07/image-83.png)