Step 3. Office 365 Consent CTOUCH Pro
WARNING: The Office 365 consent may take up to 24 hours before active and should be executed by O365 Tenant Administrator!
General information:
Office 365 APIs, OAuth, Consent Flow
BRIX Pro/Kickle uses OpenID authentication to get access to Office 365 resources. Authentication principles are detailed here: https://docs.microsoft.com/en-us/azure/active-directory/develop/active-directory-v2-protocols.
These permissions are OAuth standard permissions (based on Azure AD Application specifications). CTOUCH Pro/Kickle needs to access your instance to read the contact list, retrieve the room agenda, etc., as a normal user would do (with the same "level" permissions as a normal user). The "consent" is an activation in your O365 tenant, to specify that "CTOUCH Pro/Kickle is an application and will need to authenticate to to the office server with a user account".
In addition, the CTOUCH Pro/Kickle app will always need a user account to authenticate to the online server. So there are two security levels: application-level AND user-level. Without a user account, CTOUCH Pro/Kickle cannot access the online server, even if you have approved the consent.
Note: To use these Office 365 APIs, it is necessary to use a O365 account which is authenticated on the specified Office 365 tenant, and to specify the application ID. CTOUCH and/or Kickle employees CANNOT access these APIs.
To use these Office 365 APIs, it is necessary to use an Active Directory account that is authenticated on the specified Office 365 tenant and to specify the application ID.
Thanks to the consent process, your data is secured. Kickle and/or CTOUCH employees CANNOT, in any way, access your data.
Authorization Scope:
Note: CTOUCH Pro & Kickle Essentials are both the same product
Executing the consent:
1. Go to: CTOUCH Consent Pro
2. Fill in all required details and press [NEXT]
3. Scope of the consent is shown and press [NEXT] to confirm
4. Sign in with the Microsoft Tenant Administrator account:
5. Accept the shown consent.
6. Consent is done!
Note: If below message pops up, you do not have the administrator rights to accept the consent. Please check the rights from the account you are using and/or login in with the admin account.