Introduction

Microsoft 365 is a comprehensive subscription-based service offered by Microsoft, encompassing a suite of productivity tools and cloud-based services to enhance communication, collaboration, and efficiency. Formerly known as Office 365, it includes familiar desktop applications like Word, Excel, and PowerPoint, continually updated to provide users with the latest features. Microsoft 365 extends beyond traditional office software, offering cloud storage through OneDrive for Business, collaboration with SharePoint Online, and integrated communication and teamwork features with Microsoft Teams. The service also includes advanced security measures, compliance tools, and business intelligence capabilities, making it a versatile solution for individuals, businesses, and enterprises looking to streamline their workflows and adapt to the demands of the modern digital workplace. An Office 365 connector can be configured in SigningHub Admin by providing two integration keys, i.e. Client ID and Client Secret. 


How it works?

  1. Create an Office 365 App in Azure Active Directory.
  2. Create an Office 365 connector in SigningHub Admin.
  3. Create an Office 365 authentication profile in SigningHub Admin.


Create an Office 365 App in Azure Active Directory

  1. Sign in to the Azure portal using your Azure Active Directory administrator account.



  2. Select "Azure Active Directory" from the left tab.



  3. Click on the "Enterprise Applications" from the left panel.



  4. Click on the "New application" button.



  5. Click on the "Create your own application" button.



  6. Enter the name for the app, select an option for your app via the radio button, and click on the "Create" button.



  7. Select the "Supported account types". Under the "Redirect URl", select "Web" and enter "https://web.signinghub.com/OAuth/Office365CallBack".
    Click on the "Register" button.



  8. Click on the "Enterprise applications | All applications" button.



  9. Search and open the created app.



  10. You will be taken to the app overview screen. Select "Properties" from the left tab.



  11. From the properties screen, click on the "application registration" hyperlink.



  12. Select "API permissions" from the left tab.



  13. From the "API permissions" screen, make sure that “User.Read” permission is configured. 



  14. Select “Certificates & secrets” from the left tab. Create a new client secret by clicking on the “New client secret” button. Save the client secret for use in the SigningHub connector.



  15. Get the ClientID, directory ID and endpoints from “Overview”.



  16. For adding user, go to “Office 365” from “Overview”.



  17. Click on the “Assign users and groups” button.



    Then click on the “Add user/group” button.



  18. Create an Office 365 Connector, using information from step 14 and 15.

Create an Office 365 connector

  1. Access the SigningHub Admin portal.
  2. Click the "Configurations"section from the left menu.
  3. Click the "Connectors" tab. The "Connectors" screen will appear.
  4. Click  from the grid header.



  5. A dialog will appear to add the connector details. The connector dialog is comprised of two screens, i.e. Basic Information and Details. Specify the basic information and click the "Next" button to provide the respective connector details. See the below table for fields description.




     
  6. Click the "Finish" button. A new connector will be saved and displayed in the list.


Basic Information

Fields

Description

Name

Specify a unique name for this connector, i.e. My Office 365. This connector will be used in the configuration of Authentication Profiles.

Provider

Select the provider for this connector, i.e. "Office 365". 

Purpose

This field will display the purpose of the selected provider above, i.e. the purpose of "Office 365" is "Authentication".

Active

Tick this check box to make this connector active. Inactive connectors cannot be configured in the Authentication Profiles.


Details

Fields

Description

Logo

Select an appropriate image in the jpeg, jpg, gif or png format for the connector's logo that will be displayed on the login screen.

Client ID

Specify the registered client ID that has been provided by Office 365 during account configuration, e.g.
 "04586340-uc46ggb7obrikmapn0or2ubignra". 
SigningHub will use this ID to communicate with the Office 365 server.

Client Secret

Specify the client secret that has been provided by Office 365 during account configuration, e.g.
"hniZYHqPEcKy6H25-LjzSX0Q".

Account Type

Specify whether the account type is Single Tenant or Multi Tenant. 
A single tenant account allows the accounts within the same organisational directory only to use the application. While a multi tenant account allows all the organisational directories to use the application.

[Name] Attribute

Specify the attribute against which you want SigningHub to lookup the "Name" of a user, from Azure AD.
The character limit for this field is 255 characters.

[Email] Attribute

Specify the attribute against which you want SigningHub to lookup the "Email" of a user, from Azure AD.
The character limit for this field is 255 characters.


  1. The "[Name] Attribute" and the "[Email] Attribute" fields are optional. These can be configured if the administrator wants to specify certain fields from which SigningHub should fetch the name and email information respectively.
  2. In case the "[Name] Attribute" and the "[Email] Attribute" fields have been configured, the system will only lookup the specified attributes.
  3. In case the "[Name] Attribute" and the "[Email] Attribute" fields have been configured, but the system is unable to validate the specified attributes in Azure AD, the system will prompt an error message.
  4. The following link contains the list of parameters that can specified in the "[Name] Attribute" and the "[Email] Attribute" fields:
    https://learn.microsoft.com/en-us/graph/api/user-get?view=graph-rest-1.0&tabs=http


Create an Office 365 authentication profile

  1. Access the SigningHub Admin portal.
  2. Click the "Configurations" option from the left menu.
  3. Click the "Authentication Profiles" option. The "Authentication Profiles" screen will appear.
  4. Click  from the grid header.

     

  5. A dialog will appear to configure the authentication profile details. 



  6. Specify the details accordingly and click the "Save" button. A new authentication profile will be saved and displayed in the list. See the below table for fields description.


Authentication Profile

Fields

Description

Name

Specify a unique name for this authentication profile, i.e. My Office 365 Authentication. This name will be displayed at the login screen of SigningHub Desktop Web.

Description

Specify any description related to this authentication profile for your record.   

Method

Select the authentication method (i.e.Office 365 Authentication) for this profile.

Connector        

This field will appear to select the related connector, when you select any third-party authentication method above. Select the Office 365 connector. Click  to view the details of the selected connector.

Active

Tick this check box to make this authentication profile active. Only the active profiles are available to the end users on their Login screen and Integration screen of SigningHub Desktop Web for authentication.

Private

Tick this check box to mark this authentication profile as private. A private profile will not be available to the (public) end users on their Login screen and Integration screen of SigningHub Desktop Web.
Private profiles from here will be available in the "Settings" tab of service plan configuration, and are specifically used for the corporate logins on SigningHub Desktop Web.

You can associate any supported external Identity Provider as required with a private authentication profile to make it exclusive for a corporate. 


  1. This profile will be used for authentication purposes at the time of logging in or signing a document.


See Also