Microsoft Integration

This page shows how you can connect your WEM application to Microsoft services using the Microsoft Graph API. The integration is done via REST API calls and highlights how to retrieve data from the Microsoft graph API.

Rather than a full implementation guide, article is meant to serve as a starting point. The actual setup will depend heavily on your organization’s Microsoft configuration and specific use case. You can find out how to set up and configure application registrations here (microsoft docs) and information on the graph API endpoints can be found here.

The OAuth 2.0 authentication protocol

To be able to safely make use of external providers there’s always some authentication procedure involved. The WEM Modeler already supports the two main standard industry protocols, SAML 2.0 and OAuth 2.0. The Oauth protocol is used for the Microsoft Graph integrations, using EntraID as authorization provider. The Oauth authentication comes in two flavours, an application can be authorized or a specific user is authorized . Which method is needed for your application depends on your use case.

Using the authentication node shown in the image above makes this implementation easy and quick, with only the authorization profile to be set up. The images below show the OAuth authorization profiles for a application followed by the user method. The biggest difference between the two are the Grant Type used and the portal redirect URLs.

The last step on the modeler side is using HTTP requests, with the Request URL from the graph endpoint and authentication set to Oauth 2. When this is set up right it will use the bearer tokens provided by the initial authorization to give you access to the graph API-resources. In the below image a HTTP get request is used to request a list of calendar items.

Once the HTTP request is properly configured and authorized, you can use the response JSON to import data into your application — for example, to display calendar events, user data, or emails directly from your Microsoft environment. Other request methods can be used for adding or updating information in your Microsoft environment.

This setup demonstrates the foundation for integrating Microsoft services through the Graph API. From here, you can expand the integration based on your specific needs. Whether you're managing users, reading SharePoint content, or interacting with Teams, the approach remains the same: authenticate, send REST requests, and handle the responses.