Setup strict mode OAuth connectivity with Microsoft Exchange Online

Create a strict mode app registry for Microsoft Exchange Online with ServiceNow instance for OAuth authorization.

Before you begin

Configure Microsoft Azure.

Ensure that the application scope is set to Microsoft Exchange Online Spoke. Otherwise, do the following:

1. Select the Application scope icon (

1. In the drop- down, select the option consisting Application scope:.
2. In the filter navigator, search and select Microsoft Exchange Online Spoke.
3. Refresh the page.

Role required: admin

Procedure

1. Navigate to All > System OAuth > Application Registry.

2. Select New.

3. Select Connect to a third party OAuth Provider

4. On the form, fill in the fields with the specified details.

   Field	Description
   Name	Unique name to identify the record as a strict mode record, for example, MsExchange strict mode.
   Client ID	Client ID created during the app creation in Microsoft Azure.
   Client Secret	The password you generated when creating the app in Microsoft Azure.
   Default Grant Type	Grant type used to establish the token. Select Authorization Code.
   Authorization URL	OAuth authorization code endpoint. Enter https://login.microsoftonline.com/<tenant_id>/oauth2/v2.0/authorize.
   Token URL	OAuth server token endpoint. Enter https://login.microsoftonline.com/<tenant_id>/oauth2/v2.0/token >.
   Redirect URL	OAuth callback endpoint. The URL is automatically filled as https://<instance-name>.service-now.com/oauth_redirect.do.

5. Right-click in the form header and select Save.

   A system-generated OAuth entity profile is created and displayed in the OAuth Entity Profiles related list. For example, MsExchange Strict mode default profile.

6. Create a OAuth Entity Scope.

   1. In the OAuth Entity Scopes related list, select Insert a new row...

   2. Enter the name as Calendars.ReadWrite for the scope.

   3. Enter the OAuth scope as Calendars.ReadWrite.

   4. Select the Save icon.

   5. Right-click the Application Registry form header and select Save.

      The system creates the scope record. Similarly, create the following entity scopes:

      • Name: Calendars.ReadWrite.Shared

        OAuth scope: Calendars.ReadWrite.Shared

      • Name: offline_access

        OAuth Scope: offline_access

7. Select Update.

8. On the Application registry form, select the OAuth Entity Profiles related list.

   In the following steps, you add the OAuth Entity Scopes that you created in Step 6 to the default profile.

   1. Select the default entity profile, for example, MsExchange Strict mode default profile.

   2. On the OAuth Entity Profile form, do the following:

      1. In the OAuth Entity Profiles Scopes section, double-click Insert a new row.
      2. Select the Lookup icon (

    3.  Select `Calendars.ReadWrite` that is assigned to the OAuth provider that you created in Step 6.
    4.  Repeat the previous steps and also add the following OAuth Entity Profiles Scopes created in Step 6:
        -   `Calendars.ReadWrite.Shared`
        -   `offline_access`

1. Select Update.

Result

The strict mode OAuth registration is added for Microsoft Exchange Online with strict mode OAuth entity profiles and OAuth entity scopes.

What to do next

Configure the connection and credential alias. You can configure the default alias or create your own alias.

To configure the default alias, refer to Configure strict mode Connection and Credential alias for Microsoft Exchange Online.

Parent Topic:Create a strict mode connection with Microsoft Exchange Online

Related topics

Configure Microsoft Azure

Create connection with Microsoft Exchange Online Spoke in strict mode

Create a strict mode configuration in Microsoft Exchange Online

Configure strict mode Connection and Credential alias for Microsoft Exchange Online

Create your own credential and connection alias for strict mode

Configure Microsoft Exchange Online calendar provider in strict mode