IIS installation for O365 onboarding

[jayendraraju]

HI Champions

I am setting up a connection for O365 onboarding on the pre-requisites while preparing O365 for integration is to install IIS server, my question is

1) Should we install IIS server on-premises or on Azure?

Saviynt version 23.4

Thanks

Jayendra

[sudeshjaiswal · Accepted solution]

Hello @jayendraraju,

You need to install it on on-prem (windows server).

Thanks,

For Ref:- https://docs.saviyntcloud.com/bundle/WinPS-v23x/page/Content/Understanding_the_Integration-between-E... 

[jayendraraju]

Hi @sudeshjaiswal 

1) Do we need to expose this to the internet (Assign Internet IP) for it to communicate with Office365?

2) what would be a) Microsoft 365 Agent URL and b) Microsoft 365 Agent Authentication Token

Thanks

Jayendra

[sudeshjaiswal]

Hello @jayendraraju,

1) Do we need to expose this to the internet (Assign Internet IP) for it to communicate with Office365?
No.
2) what would be a) Microsoft 365 Agent URL?

a. Microsoft 365 Agent URL:  This consists of the IIS server IP or hostname along with the port number where Agent Site has been configured in the IIS Manager.

Example: IIS Server IP Address: 3.18.17.34 (Hostname: saviyntdc001.saviyntlabs.com) and the Port where agent site is configured is 8080(http) or 8081(https) then,

Agent URL will be http://3.18.17.34:8080 or http://saviyntdc001.saviyntlabs.com:8080 or https://3.18.17.34:8081 or https://saviyntdc001.saviyntlabs.com:8081

 b) Microsoft 365 Agent Authentication Token:
It is a token that will authenticate the API resources through the above URL to make sure the request is coming from a trusted source. 

Thanks,

For Ref :- https://learn.microsoft.com/en-us/windows/ 

[jayendraraju]

@sudeshjaiswal 

Appreciate you response, I have a follow up question for this

 b) Microsoft 365 Agent Authentication Token:
It is a token that will authenticate the API resources through the above URL to make sure the request is coming from a trusted source. 

How do we generate the authentication token for this

Regards

@jayendraraju 

[sudeshjaiswal]

Hello @jayendraraju,

Please refer to the below screenshot,

For Ref:- https://docs.saviyntcloud.com/bundle/MSOffice365-v23x/page/Content/Creating-an-Integration.htm 

[J-F_Gauthier]

So you are suggesting that the Microsoft 365 Agent Authentication Token and Microsoft 365 Client Secret is the same ?

[sudeshjaiswal]

Hello @J-F_Gauthier,

Sorry for the delay in response,
No, Microsoft 365 Agent Authentication Token and Microsoft 365 Client Secret are not the same.
Microsoft 365 Agent Authentication Token is an access token that enables clients to securely call protected web APIs.
Microsoft 365 Client Secret is a shared secret that is used in the client credentials flow to authenticate applications rather than individual users.

For Ref: 
https://learn.microsoft.com/en-us/azure/active-directory/develop/access-tokens. 
https://learn.microsoft.com/en-us/azure/active-directory/develop/v2-oauth2-client-creds-grant-flow .
https://learn.microsoft.com/en-us/azure/app-service/configure-authentication-provider-aad. 

[J-F_Gauthier]

How can i generate the access token ?

Thank you.

[sudeshjaiswal]

Hello @J-F_Gauthier,

a. Microsoft 365 Agent Authentication Token: - this will be provided by the Saviynt. (Please raise the FD ticket ) for the same.
b. Microsoft 365 Client Secret:- this needs to be generated at SharePoint.

For Ref: https://docs.saviyntcloud.com/bundle/MSOffice365-v23x/page/Content/Creating-an-Integration.htm#Prepa...