Page Comparison

The MyTimetable Office 365 integration is able to connect to a user's calendar using the Outlook Calendar REST API. This page describes how to grant MyTimetable access to the Outlook Calendar REST API. MyTimetable will then be able to access calendars without explicit consent of a user.

Registering MyTimetable as an application in Azure AD

• Visit the Microsoft Azure Management Portal at https://portal.azure.com, using the credential of your Microsoft tenant that has the subscription to Office 365 you wish to use.
• Click "Browse all" to browse all resources.
• Click "Activity Directory". You will now be redirected to the classic Azure Management Portal.
• Click the Active Directory you would like to manage.
• On the Directory page, click "Applications".
• Click "Add" in the bottom menu bar.

Image Removed

• Select "Add an application my organization is developing".
• Enter the Name of the application (e.g. MyTimetable-prod) and specify the Type as "Web application and/or Web API".
• Enter the App properties:
  • SIGN-ON URL. The URL where users can sign in and use your app. You can change this later as needed.
  • APP ID URI. The URI used as a unique logical identifier for your app. Use for example https://mytimetable.institution.ac.uk.
    
• Write down the "Client ID".

Your application is now registered with Azure AD.

Generating an application key

• Make sure the application you have just added is visible in the Azure Management Portal.
• Click "Configure" in the top menu.
• Scroll down to "Keys".
• Select the duration for your key.
• Click "Save".

Image Removed

• The Azure Management Portal now displays the app secret.
• Copy and store the key value. The key value is not needed for the MyTimetable integration, but you won't be able to retrieve it after you leave the page.

...

The MyTimetable Office 365 integration is able to connect to a user's calendar using the Outlook Calendar REST API. This page describes how to grant MyTimetable access to the Outlook Calendar REST API. MyTimetable will then be able to access calendars without explicit consent of a user.

Registering MyTimetable as an application in Azure AD

• Visit the Microsoft Azure Management Portal at https://portal.azure.com, using the credential of your Microsoft tenant that has the subscription to Office 365 you wish to use.
• Click "Browse all" to browse all resources.
• Click "Activity Directory". You will now be redirected to the classic Azure Management Portal.
• Click the Active Directory you would like to manage.
• On the Directory page, click "Applications".
• Click "Add" in the bottom menu bar.

Image Added

• Select "Add an application my organization is developing".
• Enter the Name of the application (e.g. MyTimetable-prod) and specify the Type as "Web application and/or Web API".
• Enter the App properties:
  • SIGN-ON URL. The URL where users can sign in and use your app. You can change this later as needed. Any URL is possible, MyTimetable does not use this value.
  • APP ID URI. The URI used as a unique logical identifier for your app. Use for example https://mytimetable.institution.ac.uk.
    
• Write down the "Client ID".

Your application is now registered with Azure AD.

Creating and configuring an X.509 certificate

makecert -r -pe -n "CN=MyInstitution MyTimetableProdO365" -m 120 -ss my -len 2048

$cer = New-Object System.Security.Cryptography.X509Certificates.X509Certificate2("C:\Full\Path\To\Certificate\certificate.cer")
$bin = $cer.GetRawCertData()
$base64Value = [System.Convert]::ToBase64String($bin)
$bin = $cer.GetCertHash()
$base64Thumbprint = [System.Convert]::ToBase64String($bin)
$keyid = [System.Guid]::NewGuid().ToString()

"keyCredentials": [
    {
        "customKeyIdentifier" : "$base64Thumbprint_from_above",
        "keyId": "$keyid_from_above",
        "type": "AsymmetricX509Cert",
        "usage": "Verify",
        "value": "$base64Value_from_above"
    }
],

Information required for MyTimetable configuration

In order to enable service calls to the Outlook Calendar REST API, MyTimetable requires the X.509 certificate generated in the previous steps.

• Open the Microsoft Management Console (Start -> Run -> mmc).
• Click "File" -> "Add/remove snap-in".
• Add the "Certificates" snap-in for "My user account".
• Find the new certificate in the "Personal" folder (Certificates - Current user -> Personal -> Certificates).
• Right-click the certificate, and pick "All Tasks" -> "Export".
• Choose "Yes, export the private key".
• Also enter a password for the certificate.
• Export the certificate to a file.

Please make sure the following data is available at the server which will handle the Office 365 synchronisation:

• X.509 certificate exported in the previous step.
• Password for the X.509 certificate.
• Azure AD tentant name.
• Client ID of the registered app.

Sources

• https://msdn.microsoft.com/library/office/dn707383.aspx

...