Reco

Reco's various integrations with Microsoft require specific sets of permissions your admin needs to authorize Reco to access. For more granular control over allowed permissions, Reco lets the user select the scopes authorized for it to use for each Microsoft integration. To do that, a Microsoft account admin is required to create an app, specify its scopes, and copy the relevant fields for Reco to use.

This section describes how to obtain the 3 values needed for integrating your Microsoft service with Reco:

- Client ID
- Secret
- Tenant ID

Login to <a href="https://entra.microsoft.com/#home" rel="nofollow noopener noreferrer" target="_blank">Microsoft Entra</a>

On the sidebar, click on "Applications" -&gt; "App Integrations"

Name the application (for example, "Reco"). Leave all other selections as they are and click "Register"

In the opened page of the newly created application, copy the values of "Application (client) ID" and "Directory (tenant) ID"

In the app's page sidebar, navigate to "Certificates &amp; secrets", and click on "New client secret"

Fill in a description and click on "Add".

Copy the value of the secret (not the "Secret ID")

In the app's page sidebar, navigate to "API Permission" and add the permissions you wish to authorize Reco to access.

It is recommended to grant at least the following scopes:

1. <code>AuditLog.Read.All</code>
2. <code>Directory.Read.All</code>
3. <code>Mail.ReadBasic</code>
4. <code>User.Read</code>

On the same page, click on "Grant admin content for ..."

1. Login to <a href="https://entra.microsoft.com/#home" rel="nofollow noopener noreferrer" target="_blank">Microsoft Entra</a>
2. On the sidebar, click on "Applications" -&gt; "App Integrations"
3. Click on "New Registration"

4. Name the application (for example, "Reco"). Leave all other selections as they are and click "Register"

5. In the opened page of the newly created application, copy the values of "Application (client) ID" and "Directory (tenant) ID"

6. In the app's page sidebar, navigate to "Certificates &amp; secrets", and click on "New client secret"

7. Fill in a description and click on "Add".
8. Copy the value of the secret (not the "Secret ID")

9. In the app's page sidebar, navigate to "API Permission" and add the permissions you wish to authorize Reco to access.
 
 It is recommended to grant at least the following scopes:
 1. <code>AuditLog.Read.All</code>
 2. <code>Directory.Read.All</code>
 3. <code>Mail.ReadBasic</code>
 4. <code>User.Read</code>
10. On the same page, click on "Grant admin content for ..."

In the Integrations screen of Reco, click on "Add Integrations" and choose the relevant Microsoft app to connect

Choose a subscription and tick "Use your own Application"

Fill in the Account (client) ID in "Client ID", secret in "Client Secret", and replace <code>&lt;your_tenant_id&gt;</code> in the "Authority URL" value with the Directory (tenant) ID you have obtained in the previous section.

1. In the Integrations screen of Reco, click on "Add Integrations" and choose the relevant Microsoft app to connect

2. Choose a subscription and tick "Use your own Application"

3. Fill in the Account (client) ID in "Client ID", secret in "Client Secret", and replace <code>&lt;your_tenant_id&gt;</code> in the "Authority URL" value with the Directory (tenant) ID you have obtained in the previous section.
4. Click on "Connect"

Background

Creating an app in Microsoft

Integrating with Reco