Exchange OAuth

Implements OAuth 2.0 authentication for connecting Grooper to Microsoft Exchange Online (Office 365) using Azure AD.

Remarks

Exchange OAuth provides a secure, standards-based authentication method for accessing Microsoft Exchange Online mailboxes from Grooper. This class manages the OAuth 2.0 flow required by Azure Active Directory (Azure AD), enabling Grooper to connect to Exchange mailboxes and services in cloud environments.

Overview

When Exchange OAuth is selected as the authentication method for an Exchange binding, Grooper uses the configured Azure AD application credentials (Client ID, Client Secret, and Tenant ID) to obtain access and refresh tokens. These tokens are used to authenticate all HTTP requests to Exchange Online via the Exchange Web Services (EWS) API.

The required OAuth scopes are pre-configured to allow delegated access to mailbox data:

• EWS.AccessAsUser.All
• offline_access

Usage Notes

• Exchange OAuth is required for Exchange Online (Office 365) and is not supported for on-premises Exchange servers.
• Before use, register an application in Azure AD and grant it the necessary API permissions. Enter the Client ID, Client Secret, and Tenant ID in the corresponding properties of the authentication method.
• When prompted, sign in with a Microsoft account that has access to the target Exchange mailboxes.
• After successful authentication, Grooper will store a refresh token and use it to maintain access without repeated logins.
• If the refresh token expires or is revoked, you will be prompted to re-authenticate.

Properties

Name	Type		Description
Authentication	Refresh Token Info	►	Provide credentials by signing in with a Microsoft account. EditorLogin Editor ConverterLogin Converter Requiredtrue The 'Authentication' property allows administrators to manage OAuth credentials for the connection. When configuring OAuth Authentication, use this property to initiate the login process and store the resulting refresh token. Click the property editor to launch the OAuth login dialog and sign in with the required account. The refresh token is securely stored and used to obtain new access tokens as needed, reducing the need for repeated logins. If the refresh token expires or is revoked, you will be prompted to re-authenticate. A Microsoft account can be created here.

Used By

ExchangeSharePointWeb Service Lookup