This integration enables the flow of data from Office 365 directly in to IT Glue. Tenants, Users and Mailbox information will sync automatically, staying accurate and up to date.
Benefits of this integration include:
- Managing the options of your Office 365 asset including manual syncing and comparing data between IT Glue and Office 365
- Jump from IT Glue to a User List in the Tenant Portal when you click Manage on a synced Contact
- Viewing logs related to your Office 365 integration in the Sync Logs
At any time, you can come back to the Active Integrations screen (Account > Integrations) to make changes to the integration.
The field mappings are set up automatically when you follow the instructions below. For more information, refer to our Office 365 Field Mapping KB article.
- Manager or Administrator access to IT Glue
- One free data source
- Microsoft Cloud Partner certified to offer delegated administration
- Delegated admin permissions to each of your clients' Office 365 tenants through your own Office 365 admin portal, rather than direct logins to their admin portals
Please note that the Office 365 integration supports direct logins to client admin portals, but integrating in this way requires an additional data source and following the steps in this article for each client you wish to integrate.
- Log in to your Office 365 Account.
- In the left-hand sidebar, click Admin centers > Azure Active Directory.
- In the new Dashboard window that opens, click Azure Active Directory > App registrations.
- Click on New registration.
- Complete the following actions in the Register an application screen.
- Name - Enter an application name that will be displayed to users of the app.
- Supported account types - Select the Accounts in any organizational directory and personal Microsoft accounts option to map to Azure AD only multi-tenant.
- Redirect URI (optional) - If desired, select Web in the drop-down menu and enter a URL for the app.
- Click the Register button at the bottom of the screen to access the newly created application.
Get Application ID and Tenant ID
- In the left-hand column, click on Azure Active Directory > App registrations and then on All applications. Click on your newly configured application in the list.
- Click the Copy to clipboard icon beside the Application ID and Directory ID and paste them in to IT Glue. Refer to the Integrating Office 365 with IT Glue section in this KB article.
Generate secret key
- In the left-hand column, click on Certificate & secrets and then on + New client secret. An Add a client secret screen will appear.
- Add a description for your client secret, select Never under Expires, and click Add.
- In the Value column, click on the Copy to clipboard icon beside the secret key and paste it in to IT Glue. Refer to the Integrating Office 365 with IT Glue section in this KB article.
Note: After you save the configuration changes, the right-hand column will contain the client secret value. Be sure to copy the value for use in your client application code as it will not be accessible once you leave the page.
You will need to add API access to complete the application. The APIs you need are Windows Azure Active Directory, which is automatically added when you create the application, and Microsoft Graph.
- Click API permissions in the left-hand menu and then click the + Add a permission button.
Important. You will see that Microsoft Graph has already assigned a default User.Read. permission. Click on this permission and then on Remove permission. Click the Yes, remove button to delete this permission.
- In the Request API permissions - Select and API column that appears, click on the Azure Active Directory Graph button.
- Click on Application permissions and then on Directory. Check the box next to Directory.ReadWrite.All.
- Save the changes by clicking Add permissions at the bottom of the screen.
- Click the + Add a permission button again.
- In the Request API permissions - Select an API column that appears, click on the Microsoft Graph button.
- Click on Application permissions and complete the following actions for each of the subsections:
- Directory - Check the box beside Directory.Read.All
- Reports - Check the box beside Reports.Read.All
- User - Check the box beside User.Read.All
- Save the changes by clicking Add permissions at the bottom of the screen.
- In the API permissions main screen, click the Grant admin consent for Company button at the bottom of the screen. In the confirmation pop-up, click Yes.
Integrating Office 365 with IT Glue
- In IT Glue, navigate to Account > Integration and click the + New button. Then, click on the Office 365 button.
- Enter the information you copied from the Get Application ID & Tenant ID / Generate secret key sections of this KB article and click Connect.
- After you enter your Office 365 login information in IT Glue, you'll be taken to the Sync your data Office 365 screen. Select the data you want to sync. By default, recommended options are listed first. Your options may look different than in the screenshot above.
Note: As a best practice, we recommend that you only select that user subscriptions that you actively manage. If you would like to see licenses, ensure the Licenses checkbox under Other is selected.
- Click the Save and continue button. The sync will be automatically queued in the Active Integrations main screen.
- By default, newly queued syncs are scheduled to take place one hour later. Use the manual sync option to prioritize the sync to start sooner. Click Actions and then Start Manual Sync.
- From the Active Integrations screen, you can see the overall sync status. When the sync is complete, the Status column changes from Syncing... to OK.
Note: If you have a Microsoft Partner Network account with access to multiple tenants, disconnecting an Office 365 integration will not remove Admin privileges from your configured application. Remove these Admin privileges yourself or delete the configured application if no longer needed.
View synced contacts
IT Glue discovers tenants and users and tries to match them to your data in your account based on the following logic:
|Contact email address||Username + "@" domain|
If no organization can be matched automatically, suggestions will be made based on name similarity. If no suggestions can be made, you will have the option to create a new organization.
- From Account > Integrations, click on Actions and then Matching.
- Start with the Unmatched filter to review unmatched organizations.
- If you're happy with any suggested search, click Accept Suggestion to accept it, or, you can search for and choose a different organization using the Match To column. You can also choose to ignore organizations, which means they won't count as unmatched items in subsequent syncs.
Warning. If you don't see an organization, click Actions > Create Organization to create (import) it. Make sure there is nothing to match first, so that you don't create a duplicate organization.
- Review all your unmatched organizations until they are all unmatched.
- If you change your mind about any of the matches, click Actions, choose Change Match, and then manually search for and choose a different organization.
Note: Contact matching behaves slightly differently to standard matching logic. If no match can be made based on the criteria listed in the Prerequisites of this KB article, a new duplicate contact will be created without further user input.
- Once all organizations have been matched, you will need to start a new manual sync. Navigate to Account > Integration > Actions > Start Manual Sync. This second manual sync will sync all contacts and organizations in to IT Glue now that you've matched your organizations.
- When the sync is complete, click on any matched tenant to take you to the relevant organization. Then, click Contacts from the sidebar.
- Click on any contact that has corresponding data Office 365 and you will be able to see the additional data overlay as shown below.
- Continue onto the Office 365 License Integration KB article.