Microsoft Tenant Specific Endpoints

​

Overview

​

Pre-built tooling

​

Pre-built integrations

No pre-built integration yet (time to contribute: <48h)

​

Access requirements

​

Setup guide

No setup guide yet.

​

Useful links

• Create an Azure app registration for the specific application.
  • Add permissions for the appropriate app on the API Permissions tab
• OAuth-related docs.
  • See particularly the tenant parameter under Request an authorization code. This tenant parameter must be provided as extra configuration to the frontend SDK.
• List of OAuth scopes
  • The specific scopes required will depend on the application being accessed. This might use the .default scope with the resource’s identifier URI.

This endpoint supports services authorized using an Azure App Registration in any accessible tenant, including:

• Microsoft Dynamics 365 Finance and Operations

​

API gotchas

• If you are developing an app for users within your own organization and the app has already been granted adequate permissions at the organization level with user consent turned off, you must override the integration config when calling the create connect session method:
  • Override authorization_params by setting only scope: '.default' and "prompt": "" to remove the consent screen. Note that if consent is required it will prompt the user for consent due to the “.default” scope.
  • Override authorization_params by setting only scope: '.default offline_access' and "prompt": "" to remove the consent screen. Note that if consent is required it will prompt the user for consent due to the “.default” scope.
  • Set the .default scope documentation to ensure the permissions remain the same as those granted at the organization level.

const { data } = await nango.createConnectSession({
  [...],
  integrations_config_defaults: {
    "microsoft-tenant-specific": {
      authorization_params: {
        scope: '.default offline_access',
        "prompt": ""
      }
    }
  }
});

If this is not done, the app will show a consent screen prompting the user to grant permissions which the user will be unable to do without admin access.