...
Login to your organizations Azure account.
Select Azure Active Directory in the left-hand navigation, then select App registrations under Manage.
Select New registration. On the Register an application page, set the values as follows.
Set Name to a friendly name for your app.
Set Supported account types to the choice that makes sense for your scenario.
For Redirect URI, set the value that is shown in the MXTS Communication Channel page (As Communication channel is not supporting OAuth2.0 right now, please add redirect_uri = http://localhost).
Redirect URI - https://<concern-code>.maxxton.net/customercare/en-us/azure-oauth-callback.html
Choose Register. On the next page, copy the values of the Application (client) ID and Directory (tenant) ID and save them, you will need them later.
...
Once the app is registered, then provide the API permissions to that App that are required.: -
Select API Permissions in the left-hand navigations under Mange.
Click on ➕ Add a permission , and then click on tab APIs my organization uses.
Search for API name Office 365 Exchange Online.
On the screen you will see two buttons on the screen Delegated Permissions and Application Permissions for the above API.
Select Application Permissions.
Under the Application Permissions search for the IMAP permission and select IMAP.AccessAsApp permission.
At last click on Add permissions.
Also grant the Microsoft Graph → User.read permission (this is the default permission added everytime).
Make sure the below permissions are added:-
https://graph.microsoft.com/User.Read (To read the user basic detail like email)
https://ps.outlook.com/IMAP.AccessAsApp (To read the user emails from outlook)
...
The API permission requires admin consent if you yourself don’t have admin rights.
...